Behavioral task
behavioral1
Sample
a506422df8674f10609bf0aa4a088ab13aa19ca6eaa11523a4188750fc434e91.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a506422df8674f10609bf0aa4a088ab13aa19ca6eaa11523a4188750fc434e91.exe
Resource
win10v2004-20221111-en
General
-
Target
a506422df8674f10609bf0aa4a088ab13aa19ca6eaa11523a4188750fc434e91
-
Size
193KB
-
MD5
344d841006e7128c962b8212e4ba7361
-
SHA1
5b9a297c3f1a8f07230bdfe21c886a00e80b0016
-
SHA256
a506422df8674f10609bf0aa4a088ab13aa19ca6eaa11523a4188750fc434e91
-
SHA512
58d5404fe600a7ca3c0cbe8421915bbeba945449bd226ea95a24632fe7e840e0dc9e8d0b2e402a289e8a06bb33f675b77e1803d0324f1ecde44a06431f4bea78
-
SSDEEP
6144:+ckg4GZC4LbsbFZi9Og/0Tfozvz/25uqid:+Hg4GZfbWZis/fivzuoqid
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
a506422df8674f10609bf0aa4a088ab13aa19ca6eaa11523a4188750fc434e91.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 256KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 189KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE