Behavioral task
behavioral1
Sample
f8876db474a975c7cda9611a99290cfc2324849def81cdcea5bdbcc0cb5eddbf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f8876db474a975c7cda9611a99290cfc2324849def81cdcea5bdbcc0cb5eddbf.exe
Resource
win10v2004-20220901-en
General
-
Target
f8876db474a975c7cda9611a99290cfc2324849def81cdcea5bdbcc0cb5eddbf
-
Size
224KB
-
MD5
1d6c731cb2d3656ce21e1842fe5e296d
-
SHA1
e30e79d145e2d72c4a04882a9020a96f57a2fd85
-
SHA256
f8876db474a975c7cda9611a99290cfc2324849def81cdcea5bdbcc0cb5eddbf
-
SHA512
a569c51643b18e31a2f9c7507d97957236b7aec1ca63f6839c8542e2907b6419f0ae47bf815ad6806aed44b08a69783693e43111cbd154d5cf55f5b9b1319bc1
-
SSDEEP
1536:1jNbqrMJ3j2fyb21W3paG+0Fc8/+R0sQn38Dhvl0+uT+f+ae/cfu3dF4i:1jNGIJ3j28cW+0j+CnIJl0ZI+d/MwFP
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f8876db474a975c7cda9611a99290cfc2324849def81cdcea5bdbcc0cb5eddbf.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE