Behavioral task
behavioral1
Sample
cb9e1a69c7b167ba60465b99e04c2fb4a66a337796672208cca4fbe8b41ef621.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cb9e1a69c7b167ba60465b99e04c2fb4a66a337796672208cca4fbe8b41ef621.exe
Resource
win10v2004-20220812-en
General
-
Target
cb9e1a69c7b167ba60465b99e04c2fb4a66a337796672208cca4fbe8b41ef621
-
Size
325KB
-
MD5
4a2bf332670624a700ba66d3eb317422
-
SHA1
7377766221db5c71e000ef31f8fdd8ca8099a3cf
-
SHA256
cb9e1a69c7b167ba60465b99e04c2fb4a66a337796672208cca4fbe8b41ef621
-
SHA512
b60a7f75582bce655ad0add3dc57999fa6863403275a27f04d4ff6068307f351bff457f443e03f1c2c05ee63b1146b204a50680d75a5bae4801ed9c31dbef0b9
-
SSDEEP
3072:r05/QhWp2JT4cn/8bjJXzRi/ZOAAu5dvup4fk9wpu:r0mxV4k/g1zs/w4d2pP
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
cb9e1a69c7b167ba60465b99e04c2fb4a66a337796672208cca4fbe8b41ef621.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 192KB - Virtual size: 192KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 128KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE