Behavioral task
behavioral1
Sample
acf895a330d39d51bb3e60277a4fa44b580377414d9957c40e8c81f59621c5cd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
acf895a330d39d51bb3e60277a4fa44b580377414d9957c40e8c81f59621c5cd.exe
Resource
win10v2004-20221111-en
General
-
Target
acf895a330d39d51bb3e60277a4fa44b580377414d9957c40e8c81f59621c5cd
-
Size
715KB
-
MD5
2c0124db10736e2bceece07c46cc8486
-
SHA1
bfb4e03f37142c14c1715af1fceadbe457e1ed74
-
SHA256
acf895a330d39d51bb3e60277a4fa44b580377414d9957c40e8c81f59621c5cd
-
SHA512
e1089abea727bfab729da9d7b80c8b28203edb5ae2fdbf044077a9baf419c741faecbb89d2b3519ecdc27bf572ef47fe32f84441c5598da9ee2672362fa9c65b
-
SSDEEP
3072:CJnSHLzQ9S/oo5LBpNt0ZMkaWQlgcRuGMLexjLxHdQ4fUny:j0ZMkMlgcRuGMLexjLxHdQ4f
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
acf895a330d39d51bb3e60277a4fa44b580377414d9957c40e8c81f59621c5cd.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 588KB - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 122KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE