Behavioral task
behavioral1
Sample
f66cca1fcb4d6719876d2b57dd202eab4fc43ba55008407f2bc94762f133ef1c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f66cca1fcb4d6719876d2b57dd202eab4fc43ba55008407f2bc94762f133ef1c.exe
Resource
win10v2004-20220901-en
General
-
Target
f66cca1fcb4d6719876d2b57dd202eab4fc43ba55008407f2bc94762f133ef1c
-
Size
237KB
-
MD5
eaad0b3d189139a0f256d72f20ee20de
-
SHA1
01d45829ebe8c64cc8f34a6fded92eda210e2eae
-
SHA256
f66cca1fcb4d6719876d2b57dd202eab4fc43ba55008407f2bc94762f133ef1c
-
SHA512
35684de6fbd7bd9c9e2ca828ec1713429ee569d9bb8af91ece0afee643849a8d455cdfbc3fce97bf6e1e66148dc265d5c874bcafb7a8c7564e836d289883da9d
-
SSDEEP
6144:9cVPD6O2CXsgqZwcOaxaZzdj8M2df+atYIg:9ib6OAg0wcO32t
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f66cca1fcb4d6719876d2b57dd202eab4fc43ba55008407f2bc94762f133ef1c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 142KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ