Behavioral task
behavioral1
Sample
f1641f0dfdd20969278c1707a0a735e65fe22d930eb1c61e50e8f40b526bf84f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f1641f0dfdd20969278c1707a0a735e65fe22d930eb1c61e50e8f40b526bf84f.exe
Resource
win10v2004-20221111-en
General
-
Target
f1641f0dfdd20969278c1707a0a735e65fe22d930eb1c61e50e8f40b526bf84f
-
Size
105KB
-
MD5
80da64e7bef0960c8d1eb919c7aa2b9f
-
SHA1
13c74069c0b4571d04e50bb4b7ce1115fbab89da
-
SHA256
f1641f0dfdd20969278c1707a0a735e65fe22d930eb1c61e50e8f40b526bf84f
-
SHA512
cbfd151c3fc0c74847da17a953b2929f7c2f22231989bd2f032e22052b0af23069e9099ff5b93a8bb2f56a49d591a193fb54e4ca38cba744d337411a4ddeec4c
-
SSDEEP
1536:gOC0FvV4OguHxjhpA4Bm7uW0vSUsghQevBFkutIbgTuFqKRr0aF53CleGhd9TfBi:gwV4OgSzBmh04eZFkz3Rr0wGj9Tf8
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f1641f0dfdd20969278c1707a0a735e65fe22d930eb1c61e50e8f40b526bf84f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 232KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE