Behavioral task
behavioral1
Sample
fbbb58e5492b4ad2fea3aa8ddd428833c25eb0403353830d2e51e1ea2b0eec11.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fbbb58e5492b4ad2fea3aa8ddd428833c25eb0403353830d2e51e1ea2b0eec11.exe
Resource
win10v2004-20220812-en
General
-
Target
fbbb58e5492b4ad2fea3aa8ddd428833c25eb0403353830d2e51e1ea2b0eec11
-
Size
284KB
-
MD5
0419726b406d48530740b654a346ddd9
-
SHA1
51db13b7ad11e24c83af0fa9e2644f2622223e35
-
SHA256
fbbb58e5492b4ad2fea3aa8ddd428833c25eb0403353830d2e51e1ea2b0eec11
-
SHA512
5a45ea7fa63eab7b40a4f65b62b08b716617da2f2b689d78514d52d31f6bbf54cc437316d23f7fa22851443c587830e7e8960889edeb8a8465116a60c0c6e119
-
SSDEEP
384:/6ntbp5svEboz8mFxZNcCnCRq697EixqAFmW+iZNuThgzq09vsy0EM7eirsV:/6GcQPRdarhHmW+UQThg+UGHeiQV
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
fbbb58e5492b4ad2fea3aa8ddd428833c25eb0403353830d2e51e1ea2b0eec11.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
gzm0 Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ggzm Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE