Behavioral task
behavioral1
Sample
ff4931c429a9586e9307562c3e2c20b786c2627bd0e17f9a2077845f3c5106c4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ff4931c429a9586e9307562c3e2c20b786c2627bd0e17f9a2077845f3c5106c4.exe
Resource
win10v2004-20221111-en
General
-
Target
ff4931c429a9586e9307562c3e2c20b786c2627bd0e17f9a2077845f3c5106c4
-
Size
120KB
-
MD5
921794c0130669d64002f5c8f5ce16bc
-
SHA1
2dc0ca8eb81abb294834dc568b068607b03e6c2f
-
SHA256
ff4931c429a9586e9307562c3e2c20b786c2627bd0e17f9a2077845f3c5106c4
-
SHA512
9e1d427b3612e1f34d3a222630f01a20760c64461b3c2a1fc8a9f3c9f5517fad3b6a0d9901c0d752e9a6b1bc9ca5b0bde0bff6184629e75fc5c80dfa502bfc66
-
SSDEEP
1536:SkxmZADkyiNSB0n7Qb7AjKifAiBH/gnzN5OzYihtHG6+HTnbE87PRYWPdj5U3:Skxmamc87Qb7kK1zihM1HTbBp1jW3
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ff4931c429a9586e9307562c3e2c20b786c2627bd0e17f9a2077845f3c5106c4.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 62KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ