Behavioral task
behavioral1
Sample
aa892e1713b5009b4166daa966c6dd5947b998a4c239af97bff05c8562908b16.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
aa892e1713b5009b4166daa966c6dd5947b998a4c239af97bff05c8562908b16.exe
Resource
win10v2004-20220812-en
General
-
Target
aa892e1713b5009b4166daa966c6dd5947b998a4c239af97bff05c8562908b16
-
Size
469KB
-
MD5
fb6fafbb72aca3ffc8ded70234796ed7
-
SHA1
6ab594ec504125bcfd68f562a226b936ac77aa9f
-
SHA256
aa892e1713b5009b4166daa966c6dd5947b998a4c239af97bff05c8562908b16
-
SHA512
60c4d00b03118db4ccfc144858ad900578619df07a509bd6275e382b32bc3830ce6f53959016d9856e280367036160b162bae5ac21ab4d7b5e5bbac876b2f21b
-
SSDEEP
12288:Bq8uJhCqhio0fjtSFp65yXElVWz0TVlBPD1Bzk:Bq8uJrioWtSFcW+VWz0T1L1xk
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
aa892e1713b5009b4166daa966c6dd5947b998a4c239af97bff05c8562908b16.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RUPX1 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE