Behavioral task
behavioral1
Sample
a248c3ab86a1eec76690b0e2d19ddc4adeeb04da20e76d8d040c4e51dc834274.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a248c3ab86a1eec76690b0e2d19ddc4adeeb04da20e76d8d040c4e51dc834274.exe
Resource
win10v2004-20220901-en
General
-
Target
a248c3ab86a1eec76690b0e2d19ddc4adeeb04da20e76d8d040c4e51dc834274
-
Size
376KB
-
MD5
8e5d55f5c32ce30b821577f8a6356fba
-
SHA1
17a4da51bb4fbf22e111f9509a58e0ffc3f4d1e0
-
SHA256
a248c3ab86a1eec76690b0e2d19ddc4adeeb04da20e76d8d040c4e51dc834274
-
SHA512
198ff375e0b6e2d1c540bf6a74de9504b359c1b4495c475b3aba873734d0fd2d1212d70fdc8b62f43c85f6d0b25418399c97b846a113237262850ba4f1c91297
-
SSDEEP
3072:NhrmpP8BYxbkEzSPdtneQQQxpj0pW5R3sW+TJK5mSGBpGa8+j:Nhj1jYW5Rb+TJ5unm
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
a248c3ab86a1eec76690b0e2d19ddc4adeeb04da20e76d8d040c4e51dc834274.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 89KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE