Behavioral task
behavioral1
Sample
f99e80eff349d407496d599cdd966a6c1cff242393cd9f2b787d299d7a97477d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f99e80eff349d407496d599cdd966a6c1cff242393cd9f2b787d299d7a97477d.exe
Resource
win10v2004-20220812-en
General
-
Target
f99e80eff349d407496d599cdd966a6c1cff242393cd9f2b787d299d7a97477d
-
Size
52KB
-
MD5
aac5bb2e0bae53dc66c4d4def59c3134
-
SHA1
cda7e139ae97e5386eee44c66330a46a331c6f24
-
SHA256
f99e80eff349d407496d599cdd966a6c1cff242393cd9f2b787d299d7a97477d
-
SHA512
024c433e785292af2db2998521d6cdd6301fe5c9f6a0ef2f7455cda53404bfd481e309837024a02d43720e78697618c7ac8338992b4331c62403c12eeb612206
-
SSDEEP
1536:EDNsU3ujZLarcm+x2C9Tgt7BbhM4/VeL3NmTjD:EWU3ujV5VcYTgt7BbO4/VeL8TjD
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f99e80eff349d407496d599cdd966a6c1cff242393cd9f2b787d299d7a97477d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 4B - Virtual size: 220KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE