Behavioral task
behavioral1
Sample
cd6c50d7103cc70ce2066eacafb728c16dc127d7f5d82dfd92608e31a970d935.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cd6c50d7103cc70ce2066eacafb728c16dc127d7f5d82dfd92608e31a970d935.exe
Resource
win10v2004-20220812-en
General
-
Target
cd6c50d7103cc70ce2066eacafb728c16dc127d7f5d82dfd92608e31a970d935
-
Size
282KB
-
MD5
aba9941dcb8a3e56b55c883e8cf3ca28
-
SHA1
3534285b61eb46e25cf8bf909e503969cffbdf80
-
SHA256
cd6c50d7103cc70ce2066eacafb728c16dc127d7f5d82dfd92608e31a970d935
-
SHA512
4edc211910b05bdbc41ebe9b5f16c81c9eadaed6ec8e6bb78e0bf30ecea2acf1b9f80692e60f821bca18deb89186e45299daa4518062e0e8a84c51b17a7da711
-
SSDEEP
6144:L0rTekvCPbW/yDPgqhhxV/HWD8FXcPJkcvuRxwgp0R0llAC0:L0/7AbWcYovpHXFXIJNv6Wgp0R0lF0
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
cd6c50d7103cc70ce2066eacafb728c16dc127d7f5d82dfd92608e31a970d935.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE