Behavioral task
behavioral1
Sample
ff6edabda015a74f5e03b04d6d83f9f5344a82bc2287a596f857788db0d6c42d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ff6edabda015a74f5e03b04d6d83f9f5344a82bc2287a596f857788db0d6c42d.exe
Resource
win10v2004-20220812-en
General
-
Target
ff6edabda015a74f5e03b04d6d83f9f5344a82bc2287a596f857788db0d6c42d
-
Size
93KB
-
MD5
d7cb4c996399767435c4c250a28c3323
-
SHA1
b74332c26ce345e6ff92f3413734a5006a46e330
-
SHA256
ff6edabda015a74f5e03b04d6d83f9f5344a82bc2287a596f857788db0d6c42d
-
SHA512
1d9cd87c5edd40ba39122b68f7a4a044af1891c50f0af4504ef361ece3c8e4658994b73aa83c574407677dbdf83924a8246849a60f087f26cc7b4b2b5a6c012c
-
SSDEEP
1536:QtYfwQ3LYZCdWqBBM19ht3v5Pp12hZ4p21gdDD1/OrmAShQAvJQi:kYfZUCYH/1pj2uDJOBmpKi
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ff6edabda015a74f5e03b04d6d83f9f5344a82bc2287a596f857788db0d6c42d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 78KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE