Behavioral task
behavioral1
Sample
f891c50630134fff458605eb7ce5288c1b97ed761461fa294d2c7fb67c3d208a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f891c50630134fff458605eb7ce5288c1b97ed761461fa294d2c7fb67c3d208a.exe
Resource
win10v2004-20220812-en
General
-
Target
f891c50630134fff458605eb7ce5288c1b97ed761461fa294d2c7fb67c3d208a
-
Size
958KB
-
MD5
15e104363d3064d24b09f6eba94ebc70
-
SHA1
a19bf9185bc50366e26f94da4e3171150c4179c8
-
SHA256
f891c50630134fff458605eb7ce5288c1b97ed761461fa294d2c7fb67c3d208a
-
SHA512
9e0096ac6cab52f6d85751659ede19c8619f45b44d362c65877f6c4b0ba81a4732ef59170a9ecb7418739b03c380e8c57c9e78717fe4d58460400952a5351567
-
SSDEEP
24576:stUmtMZ2MJGfW3JQ4n87EbC3C1x4MKRvuaPd:stUMZW3n8Ym3CrKRvu+
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f891c50630134fff458605eb7ce5288c1b97ed761461fa294d2c7fb67c3d208a.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 954KB - Virtual size: 956KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE