Behavioral task
behavioral1
Sample
556cf84c768c6f2d9945d4fb5d85e5c700881efc52a30eb1ec98beb22f23a17a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
556cf84c768c6f2d9945d4fb5d85e5c700881efc52a30eb1ec98beb22f23a17a.exe
Resource
win10v2004-20221111-en
General
-
Target
556cf84c768c6f2d9945d4fb5d85e5c700881efc52a30eb1ec98beb22f23a17a
-
Size
721KB
-
MD5
1a8ec025f4318d334859a2b5ebdd8190
-
SHA1
dfea0be79f974cf40a0c82e2ae64a7549effd9f8
-
SHA256
556cf84c768c6f2d9945d4fb5d85e5c700881efc52a30eb1ec98beb22f23a17a
-
SHA512
a047b158d638bcff81a59a3f21510c1815395393e6c4a8f523b1f793cb2f6885a75cb09ca96c6cf43ee351aaa5fe2fbd05354c1107653d6849fae6851822c96c
-
SSDEEP
12288:QUp3EQ6T6jpV3KVMeHf2Jl84yfFr+3p8rkKQr6MCNVkgQpNaQ4ppFJN9IJaXSl:QKTV0TfkOYK1NkgQ3+mJaCl
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
556cf84c768c6f2d9945d4fb5d85e5c700881efc52a30eb1ec98beb22f23a17a.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 518KB - Virtual size: 520KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 201KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE