Behavioral task
behavioral1
Sample
dfb809178fce9c92a15f255eb47f334653702c27af5a91f1d627cf3b616364f0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dfb809178fce9c92a15f255eb47f334653702c27af5a91f1d627cf3b616364f0.exe
Resource
win10v2004-20221111-en
General
-
Target
dfb809178fce9c92a15f255eb47f334653702c27af5a91f1d627cf3b616364f0
-
Size
450KB
-
MD5
ac0e69961fa3f81a9b47f38ae97d949b
-
SHA1
8dc4c78d7ac9774b41fb5d6db03baa268e4faf93
-
SHA256
dfb809178fce9c92a15f255eb47f334653702c27af5a91f1d627cf3b616364f0
-
SHA512
441b88652b10ca6e9f6b354a26ec72dbc5a62e937c01f8808404d82483c78ad1c6e3a029a99018e85e22c59ce2f7439ad87d66d864d0bde76bde1b776df27922
-
SSDEEP
6144:JxWocRL1gavwKBD7nZaX/8hhaVWKv32nxt3dmN2DPKkrMuy:RDbKJnMXESfvqxtB
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
dfb809178fce9c92a15f255eb47f334653702c27af5a91f1d627cf3b616364f0.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 240KB - Virtual size: 240KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 172KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE