Behavioral task
behavioral1
Sample
85dc548e68a08dc8b72ad41235dadfa8d54e596e08ece229917fdb69825f10aa.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
85dc548e68a08dc8b72ad41235dadfa8d54e596e08ece229917fdb69825f10aa.exe
Resource
win10v2004-20220812-en
General
-
Target
85dc548e68a08dc8b72ad41235dadfa8d54e596e08ece229917fdb69825f10aa
-
Size
49KB
-
MD5
c2c867be8d0b3408e5023ee9f8614b3c
-
SHA1
5dc065f60396088d00e33edb0031eaa9ca1c0c58
-
SHA256
85dc548e68a08dc8b72ad41235dadfa8d54e596e08ece229917fdb69825f10aa
-
SHA512
bda02cb61d88c7b1b820160f1052245e6b26008e2f8f306635b9df15e9ab02efe2bb4fd5b29eff14c3767466a7e7fcd1e13723bf2489df63f6929c66823c1816
-
SSDEEP
384:WNx0iwxqsRQmh92tl+0ga0wsG864MB7r22zpkXhcxU:7iwxqsQOuHrsGtu2zpoh
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
85dc548e68a08dc8b72ad41235dadfa8d54e596e08ece229917fdb69825f10aa.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE