Behavioral task
behavioral1
Sample
a153aee1c7309947bbf8d9733e34453922cd6791478a9219d49d143a7059dd7b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a153aee1c7309947bbf8d9733e34453922cd6791478a9219d49d143a7059dd7b.exe
Resource
win10v2004-20220812-en
General
-
Target
a153aee1c7309947bbf8d9733e34453922cd6791478a9219d49d143a7059dd7b
-
Size
4.2MB
-
MD5
c5f403bfca8a916e708406e10893a72d
-
SHA1
8e4acbdf3224073900d9bc6d7d7e1aae95be3c7f
-
SHA256
a153aee1c7309947bbf8d9733e34453922cd6791478a9219d49d143a7059dd7b
-
SHA512
5bda34e3bf0e2c458abcf5148167079c029c5913a5c486d13d02793ff356be8846b7473a1f0692c1b43f5aa93f6afbe6bb5d6d0fbbd604e23da92c37405ab6d7
-
SSDEEP
98304:6PVa0MEFPRk44rri54SE3A7aGkDJQ6vQK:6PVaUFPRk44niAkeDJf
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
a153aee1c7309947bbf8d9733e34453922cd6791478a9219d49d143a7059dd7b.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.2MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE