Behavioral task
behavioral1
Sample
db506e461b8a683d5610e716052afa97fd888c0da02b8d2fc2cb2773f37cce5f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
db506e461b8a683d5610e716052afa97fd888c0da02b8d2fc2cb2773f37cce5f.exe
Resource
win10v2004-20220812-en
General
-
Target
db506e461b8a683d5610e716052afa97fd888c0da02b8d2fc2cb2773f37cce5f
-
Size
193KB
-
MD5
34aafce4b83ab61858c6ae57874ff386
-
SHA1
cb20611a04f5a9d002371b8f7a3523985b85e84b
-
SHA256
db506e461b8a683d5610e716052afa97fd888c0da02b8d2fc2cb2773f37cce5f
-
SHA512
97daeea02f592d6039bd9eb19ccb4d5c539244e6cb833a7737664f7c2c5e9d27d772a4b2a84bb88f1811f05148108b7b7117f9d8a2af508f6e1ee0afca559da2
-
SSDEEP
3072:/6h+lTYwKtpLSVBoy3ucW2tc+olGIIVN1ynNa9bL:/73fWqcFUfr1MQ
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
db506e461b8a683d5610e716052afa97fd888c0da02b8d2fc2cb2773f37cce5f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 76KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE