Behavioral task
behavioral1
Sample
f50c2b1d8027b714742cdd4aca1d038c0e554a2f98ed9374bfbbeed09b6158e5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f50c2b1d8027b714742cdd4aca1d038c0e554a2f98ed9374bfbbeed09b6158e5.exe
Resource
win10v2004-20221111-en
General
-
Target
f50c2b1d8027b714742cdd4aca1d038c0e554a2f98ed9374bfbbeed09b6158e5
-
Size
91KB
-
MD5
4d8b251a4d5d91878e0c5a24eb71fe99
-
SHA1
00cb234bd36ecf3974f42de1a13f2e9f227f2ebc
-
SHA256
f50c2b1d8027b714742cdd4aca1d038c0e554a2f98ed9374bfbbeed09b6158e5
-
SHA512
bf9be43d5c2872bf0c3a3b4979ca48ae6dcaa1db2da0572a7a1595a09f144bd7d4542cf97489048e296911a9637a8b818c78d64776991372788f9ac72ebc0eca
-
SSDEEP
1536:0cD567mZ96jgg53MfJKTM7mouH9EhyUxkU:0cD567m/u8fMTM0E8
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f50c2b1d8027b714742cdd4aca1d038c0e554a2f98ed9374bfbbeed09b6158e5.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE