Behavioral task
behavioral1
Sample
ddedf735f444c41adf2f8eea599b5ff39fbe777681e9ae800258bc413de0303c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ddedf735f444c41adf2f8eea599b5ff39fbe777681e9ae800258bc413de0303c.exe
Resource
win10v2004-20221111-en
General
-
Target
ddedf735f444c41adf2f8eea599b5ff39fbe777681e9ae800258bc413de0303c
-
Size
6.5MB
-
MD5
58f357187d253f1327c1704d5a0045c5
-
SHA1
3cd4a2f54f361144070ca0e88f4b141d46528815
-
SHA256
ddedf735f444c41adf2f8eea599b5ff39fbe777681e9ae800258bc413de0303c
-
SHA512
ecb3809e392b8174546c52a1a66b3f95299f76c2c503490b3e01386856d1a49fe71f6e9dbdc55bbd382eb1cb5fd9f85906dfe5045209027ed77eebcf636c32b4
-
SSDEEP
98304:WvRb9FQ6inHIGs/o4adGHQeEXg0PmYKkPY3zoa89D8CQyX8KLmZ4BsbBh5:WvbeHIGIotdGHQekt+b7q9wXUrLja3
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ddedf735f444c41adf2f8eea599b5ff39fbe777681e9ae800258bc413de0303c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 11.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6.5MB - Virtual size: 6.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE