Behavioral task
behavioral1
Sample
f1ee294bd7c90586e84ab054ad9f38321ca25514bfa99dc02c534d129b3b5aaf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f1ee294bd7c90586e84ab054ad9f38321ca25514bfa99dc02c534d129b3b5aaf.exe
Resource
win10v2004-20220901-en
General
-
Target
f1ee294bd7c90586e84ab054ad9f38321ca25514bfa99dc02c534d129b3b5aaf
-
Size
42KB
-
MD5
5d5b38d3d1e794956d4358ab01ce694c
-
SHA1
10378dbd57468d2dd1f36c9a391dfe89b0891f3b
-
SHA256
f1ee294bd7c90586e84ab054ad9f38321ca25514bfa99dc02c534d129b3b5aaf
-
SHA512
bb943bde752703a277769e9385ea529cebc25711ccc8c2cad7c4f844d7124fe6be9663ad616fa7f2f7b3d0c07a92a21a1a4928f48e3d3d3d95ebbaa2b34eb320
-
SSDEEP
768:WRGuY2P0Vo6r7SiAwyrMRjbqR9tnbcuyD7UjsO:YPcVo6r7S/rabqR9tnouy8wO
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f1ee294bd7c90586e84ab054ad9f38321ca25514bfa99dc02c534d129b3b5aaf.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE