Behavioral task
behavioral1
Sample
cb0beddcd54a5b3f39c9ccf22ee3c2b1adc220a670f903f4651496433c392c90.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cb0beddcd54a5b3f39c9ccf22ee3c2b1adc220a670f903f4651496433c392c90.exe
Resource
win10v2004-20221111-en
General
-
Target
cb0beddcd54a5b3f39c9ccf22ee3c2b1adc220a670f903f4651496433c392c90
-
Size
85KB
-
MD5
71b6591f5af24eb59f1f2b0aefaa1632
-
SHA1
caeca3160f52a350497d962f064540382ddfd0fb
-
SHA256
cb0beddcd54a5b3f39c9ccf22ee3c2b1adc220a670f903f4651496433c392c90
-
SHA512
b1c9c45ee604a538a1289b2836e9db724932275dd5806697c2e53bfc7fe6dcf39281196ff290abfd066a4aa6069fe716831469b285bbea95b00c3671276b50bf
-
SSDEEP
768:sNhqgEL+eZSqBLE9NwjjRDEYhz8dzCK6+lt6y9H8JvXXBhw2BXInfsAxb6Xeo9p8:IhqgEJZSqpH8gJZh3InfsAUXL9hQ
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
cb0beddcd54a5b3f39c9ccf22ee3c2b1adc220a670f903f4651496433c392c90.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE