Behavioral task
behavioral1
Sample
fafab39d7e8aa7865d2bd6ee524586483617252253aebe602277441cee247ae9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fafab39d7e8aa7865d2bd6ee524586483617252253aebe602277441cee247ae9.exe
Resource
win10v2004-20220812-en
General
-
Target
fafab39d7e8aa7865d2bd6ee524586483617252253aebe602277441cee247ae9
-
Size
154KB
-
MD5
1f981f103ecb4358308193b8851397c0
-
SHA1
49a5d0e8a22c4dc3a0d2279f92e5e21e5024f052
-
SHA256
fafab39d7e8aa7865d2bd6ee524586483617252253aebe602277441cee247ae9
-
SHA512
1e797c7d5a744f96ccbb40395a8402b3a849495d7c2a61a5bb941206484f5cd1566cfe128e6406869f264e04363579efc7f3ccb2632a8ea63b009b5ea827a91d
-
SSDEEP
3072:Jrout88rly7mcsUQZrix7pHMcEr3hE+VwFXSC1Nviq9zl+/mYYvZ:JroS8YySwfMtoXSC1VJOnYB
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
fafab39d7e8aa7865d2bd6ee524586483617252253aebe602277441cee247ae9.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX12 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE