Behavioral task
behavioral1
Sample
af81d38d82717bcb965e424df695cd7307e8c8de539fdccce8a12d957be3d994.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
af81d38d82717bcb965e424df695cd7307e8c8de539fdccce8a12d957be3d994.exe
Resource
win10v2004-20220901-en
General
-
Target
af81d38d82717bcb965e424df695cd7307e8c8de539fdccce8a12d957be3d994
-
Size
203KB
-
MD5
21e62ba79fd8db0db2e954b328be5490
-
SHA1
3057f6bc22ac878cf911234cc5478f67f9edfe31
-
SHA256
af81d38d82717bcb965e424df695cd7307e8c8de539fdccce8a12d957be3d994
-
SHA512
43bf6a8181d51759bb9bb5513a3842cc0979faa95825b1e62fff52d63ee6a7993c50099a7ccee2a8157bd376a40db4f64db6bec1d7cf83598f9d343743476307
-
SSDEEP
6144:OBdhZFkuGi2XAmLtFqJpBxATGsYhyNZOB5WzhPOhGqiWyc:eWuGiIFipUqsCeZSihPOYz
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
af81d38d82717bcb965e424df695cd7307e8c8de539fdccce8a12d957be3d994.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 352KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 194KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE