Behavioral task
behavioral1
Sample
af21771c43e4329e3d3708f7a9584d9eb5a78733b8262e6cc5b5b9cd497b13d0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
af21771c43e4329e3d3708f7a9584d9eb5a78733b8262e6cc5b5b9cd497b13d0.exe
Resource
win10v2004-20221111-en
General
-
Target
af21771c43e4329e3d3708f7a9584d9eb5a78733b8262e6cc5b5b9cd497b13d0
-
Size
423KB
-
MD5
fb4885cc483fa50716c9f17f80ae3f18
-
SHA1
1708e68a0d359902fe836b14f0e13bc69706390b
-
SHA256
af21771c43e4329e3d3708f7a9584d9eb5a78733b8262e6cc5b5b9cd497b13d0
-
SHA512
8e47abb1cccf247646d3523ba5a0a19c8d878a3aed3b71917468d01de6fef4d32474279c60b89ae8b5e7f4d81632b6f0bfcdc89e00931bbbd008454100364848
-
SSDEEP
6144:kl+pS3P7rb8WmOeOOQQqq8//3SiZTC4uVAr1wu8DtKYaTJ4PzgkjUllLN:O+pS3P7rwmJq8//hw4uvVt5aTJkep
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
af21771c43e4329e3d3708f7a9584d9eb5a78733b8262e6cc5b5b9cd497b13d0.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 264KB - Virtual size: 264KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 155KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE