Behavioral task
behavioral1
Sample
f8990f18301e8fccd3ae878379839ffc57ed7a4d200282d043bcbf92fa10d42e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f8990f18301e8fccd3ae878379839ffc57ed7a4d200282d043bcbf92fa10d42e.exe
Resource
win10v2004-20220812-en
General
-
Target
f8990f18301e8fccd3ae878379839ffc57ed7a4d200282d043bcbf92fa10d42e
-
Size
69KB
-
MD5
e40590a2d35aea71bdc2a991f2b58930
-
SHA1
586dce412c55cf75c303a9000b78b6e863f97cac
-
SHA256
f8990f18301e8fccd3ae878379839ffc57ed7a4d200282d043bcbf92fa10d42e
-
SHA512
e4b2ffbde6e292d4d65331077a89d85b02c86bf4addd3194042b8bcb6a877f1bd0250b9ac02dd3c512d96785eba9349a73ad3ad5744c2ea29c7ec27ef088c574
-
SSDEEP
1536:3I3UnG/Vwdj9nOahzeah7hRZyVZp6QyvaPrmXLmtOz:3Iuye9xzRVnyVz0i6X6tm
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f8990f18301e8fccd3ae878379839ffc57ed7a4d200282d043bcbf92fa10d42e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 128KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ocx Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE