Behavioral task
behavioral1
Sample
d1cf4e88304dc03bf9b2389d2d13ae7c4034fb475e407fc359c43c966d895f24.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d1cf4e88304dc03bf9b2389d2d13ae7c4034fb475e407fc359c43c966d895f24.exe
Resource
win10v2004-20220812-en
General
-
Target
d1cf4e88304dc03bf9b2389d2d13ae7c4034fb475e407fc359c43c966d895f24
-
Size
40KB
-
MD5
26e05fadad770e25e60bb40c22f9d0ad
-
SHA1
ba83bb73912cac8464f7a33ab3eb062c86974fb6
-
SHA256
d1cf4e88304dc03bf9b2389d2d13ae7c4034fb475e407fc359c43c966d895f24
-
SHA512
f1d0f755379b5ee519d717a1cab4a8ecad6df177d03c259a21d83f4cb971039c623d57577677e163ef8a66ed4aa9e90bc5a71b73a0b1cc4163428602a57d772d
-
SSDEEP
768:FC1hy9vbUFNmSlzs0fns80Ul6237gXTt/yT1TDnbcuyD7U2+ZbAIAL3Ie:FC1w1Mfnsu6237Aw1Xnouy8TaLzIe
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
d1cf4e88304dc03bf9b2389d2d13ae7c4034fb475e407fc359c43c966d895f24.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 144KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE