Behavioral task
behavioral1
Sample
dd659c89d925c8d19a728db1352f2a25a27cabfe66d84e3aca68fcf942017e0d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dd659c89d925c8d19a728db1352f2a25a27cabfe66d84e3aca68fcf942017e0d.exe
Resource
win10v2004-20221111-en
General
-
Target
dd659c89d925c8d19a728db1352f2a25a27cabfe66d84e3aca68fcf942017e0d
-
Size
70KB
-
MD5
f0facad4b32f1aa881ba73256a4c529b
-
SHA1
ffd10e418477613037675c82da1c4ecf9d31034c
-
SHA256
dd659c89d925c8d19a728db1352f2a25a27cabfe66d84e3aca68fcf942017e0d
-
SHA512
9cffd04941c625f7df04a252099144216c99bd9fe07a21c1788d0050f49d76f55228b44c5a8b74d588b7fe2030d388d365720b8dca0397f19969f596ef36347d
-
SSDEEP
768:w6GXE4XQNnpDnvj2/mpN8AGUkKTrPBPh9VjtQypGT/y6By59y89NprAu68Cso4X3:w6eDgN2CyAlkKhpvBrG7yJpU385WqeI
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
dd659c89d925c8d19a728db1352f2a25a27cabfe66d84e3aca68fcf942017e0d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE