Behavioral task
behavioral1
Sample
cf25c25c54b64e2889c4a7ad8f74081d825cbb9a38c2caaecbe7d9d00c5220a2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cf25c25c54b64e2889c4a7ad8f74081d825cbb9a38c2caaecbe7d9d00c5220a2.exe
Resource
win10v2004-20221111-en
General
-
Target
cf25c25c54b64e2889c4a7ad8f74081d825cbb9a38c2caaecbe7d9d00c5220a2
-
Size
852KB
-
MD5
a77f3e61f8b0c8e26bde12ea86e6bf04
-
SHA1
ebf4b0b9489b376dee7f0580a526f3bc06bad682
-
SHA256
cf25c25c54b64e2889c4a7ad8f74081d825cbb9a38c2caaecbe7d9d00c5220a2
-
SHA512
81d8492cf74578e42ef99dd08824f3e821b0f598b9e2bb57a0d9cff16db728f679f9309dfbe4aa23c1333276aa330a5f2e7321ab86e4629fdd0700721c8050fb
-
SSDEEP
12288:6BVguLWRJkZILCjr0IXgzkE33CPnOkZrbfcGow+V33rHIiC1Oy87c3etg/poj:sKNOLjYrzSZUGolLHIieOhnoa
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
cf25c25c54b64e2889c4a7ad8f74081d825cbb9a38c2caaecbe7d9d00c5220a2.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 847KB - Virtual size: 848KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE