Behavioral task
behavioral1
Sample
fa1d44c64ab32bd16bee77bc78d4f0c9f26a1658f78550b3c27963c43bcb607e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fa1d44c64ab32bd16bee77bc78d4f0c9f26a1658f78550b3c27963c43bcb607e.exe
Resource
win10v2004-20221111-en
General
-
Target
fa1d44c64ab32bd16bee77bc78d4f0c9f26a1658f78550b3c27963c43bcb607e
-
Size
496KB
-
MD5
b2febdc305ce4840f612e5351cd86eec
-
SHA1
82424d3e4d3c02e3af23b838b92d7068fb2c19c9
-
SHA256
fa1d44c64ab32bd16bee77bc78d4f0c9f26a1658f78550b3c27963c43bcb607e
-
SHA512
5a633be0b8d6758402641cf00b14f3f252e7e2fd3075f06694476e5f069535c16c84e02b26ff3a56b02c5a35dc1a45d5e876add89f0a3269fd1f69d2f139717e
-
SSDEEP
6144:KxWjVNXjGqX5UOH89PGYhSYKpNb8k8GqgUF96vlr9S:KxWRFJCOYKjzbvXFZS
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
fa1d44c64ab32bd16bee77bc78d4f0c9f26a1658f78550b3c27963c43bcb607e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 212KB - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 60KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE