Behavioral task
behavioral1
Sample
cbf5533d1f1bb28e92e6488a6b8e8cf1f849ef059cff8350a1cbf4637dbf8179.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cbf5533d1f1bb28e92e6488a6b8e8cf1f849ef059cff8350a1cbf4637dbf8179.exe
Resource
win10v2004-20221111-en
General
-
Target
cbf5533d1f1bb28e92e6488a6b8e8cf1f849ef059cff8350a1cbf4637dbf8179
-
Size
1.2MB
-
MD5
63358f90ffdcd7268d47976cadbe9c61
-
SHA1
5f9b7b6f212420a08c50b694f63e82f4b0a4e607
-
SHA256
cbf5533d1f1bb28e92e6488a6b8e8cf1f849ef059cff8350a1cbf4637dbf8179
-
SHA512
2954a94bc816b0a4f15c148c0d297035e56f5639318abe8a65a132b3b4ed182e252dd6ffb2cc0ecb39b3f2b0f7d0048a4ca87f1a395461f3d52ae19e93dced21
-
SSDEEP
6144:aTnjnvrM3mjHGh5Doh9Z5cAea4Jv81E6SD:aHn438Hwerea2vEE5
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
cbf5533d1f1bb28e92e6488a6b8e8cf1f849ef059cff8350a1cbf4637dbf8179.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 372KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 187KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE