Behavioral task
behavioral1
Sample
cf51e50acb75374f7178abfa3d20cb4fcf1f02a1f647d11bb4d585431d08c618.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cf51e50acb75374f7178abfa3d20cb4fcf1f02a1f647d11bb4d585431d08c618.exe
Resource
win10v2004-20220812-en
General
-
Target
cf51e50acb75374f7178abfa3d20cb4fcf1f02a1f647d11bb4d585431d08c618
-
Size
277KB
-
MD5
bd233aac20aa7c6073944d7653ca1419
-
SHA1
d825947c3874363d72cb6c04211baa41a92354f5
-
SHA256
cf51e50acb75374f7178abfa3d20cb4fcf1f02a1f647d11bb4d585431d08c618
-
SHA512
eb01c86a6c9517d4ac41d93b7a0f75e607edaafd944283f89c7c6655999b83ce303502212960047342601b0dcf5f8829682a5242cae73afa7f392eb6e9e6b348
-
SSDEEP
6144:gWF2cNUTdsHoj+Tl39kWJpAcETNBaur8bsOoSs:gW5oTWX2jau4sOoSs
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
cf51e50acb75374f7178abfa3d20cb4fcf1f02a1f647d11bb4d585431d08c618.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 328KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 191KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE