Behavioral task
behavioral1
Sample
aaf8f9ee16da117b4a75740ffac5b73badad578450f6a224b4e17356acc24a44.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aaf8f9ee16da117b4a75740ffac5b73badad578450f6a224b4e17356acc24a44.exe
Resource
win10v2004-20220812-en
General
-
Target
aaf8f9ee16da117b4a75740ffac5b73badad578450f6a224b4e17356acc24a44
-
Size
1.0MB
-
MD5
892a246ce22c9dab63fe8a17877f6c76
-
SHA1
5bc5670355f93c082e54808b328a2f7d45020e8c
-
SHA256
aaf8f9ee16da117b4a75740ffac5b73badad578450f6a224b4e17356acc24a44
-
SHA512
defb6dc98cf852ac800c8dac1d032d08e89a673116991482c3d8e350b96e0362f7b17723c142d914c2c92f98cbda93239ed8db411487c56cc3aa7b6d9fcc66d6
-
SSDEEP
1536:D77MVpGo9vsLX+cDL29I1JJ1KZV2wl9Vo3lWU1/qWeh+nQ5d:f7MVpGoOlDzUVpdo3PY0QL
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
aaf8f9ee16da117b4a75740ffac5b73badad578450f6a224b4e17356acc24a44.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 816KB - Virtual size: 816KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 210KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE