Behavioral task
behavioral1
Sample
f214284de3c1e5e66cef141de9a96b605a4efa1d54c6603de29f3efeba503a73.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f214284de3c1e5e66cef141de9a96b605a4efa1d54c6603de29f3efeba503a73.exe
Resource
win10v2004-20220901-en
General
-
Target
f214284de3c1e5e66cef141de9a96b605a4efa1d54c6603de29f3efeba503a73
-
Size
52KB
-
MD5
5e390683b0cba6f7b4a7d05d32cb4c61
-
SHA1
bbce8b42344c0a2ead3c83d6f2777952e569fc8a
-
SHA256
f214284de3c1e5e66cef141de9a96b605a4efa1d54c6603de29f3efeba503a73
-
SHA512
bf06793c28b8e831be11c99c29a937a5fa0c1b68f8a8b96230ac340ae886d5a7273e41e193b11e8f487a8b5af5ab029b732bc065d65108ca2e3cadc53d92bdeb
-
SSDEEP
1536:OG1G9/BRwPbYYPP7YBDgQG+va1FqLER+jDO:OGo952zFPVyvOj+XO
Malware Config
Signatures
Files
-
f214284de3c1e5e66cef141de9a96b605a4efa1d54c6603de29f3efeba503a73.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 151KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ