Behavioral task
behavioral1
Sample
c20b6c02b70f8e2fa24160e46118cb62ca52f52e8b37e1e1553a79ea80038767.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c20b6c02b70f8e2fa24160e46118cb62ca52f52e8b37e1e1553a79ea80038767.exe
Resource
win10v2004-20221111-en
General
-
Target
c20b6c02b70f8e2fa24160e46118cb62ca52f52e8b37e1e1553a79ea80038767
-
Size
238KB
-
MD5
8fa799f00dfdad07a1133019a99b4da5
-
SHA1
b474aa5ed68fd0a4014f5318fe809022e0a9f9d9
-
SHA256
c20b6c02b70f8e2fa24160e46118cb62ca52f52e8b37e1e1553a79ea80038767
-
SHA512
6d6baf6c297070bca64a67c5baf85d8911714164072264f393f90669f6b90379655aaa8631cebd09a0a2228b8478ea801ed7136f005796fb3593a667584fa3a4
-
SSDEEP
3072:Xcq/LC2BogW3i6z9zWwZAf3tf9pUMqn2xMTdXEzLn3Jf2aQbn0woBNrsKbch1NUo:NLCaN6rMeMq22T9CL3J+YwoBNrBcNZL
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
c20b6c02b70f8e2fa24160e46118cb62ca52f52e8b37e1e1553a79ea80038767.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 161KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE