Behavioral task
behavioral1
Sample
f21cc566e35b9b4a5f8061c50c06ceb63919c55d556aeb1cf660cfb966e4211a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f21cc566e35b9b4a5f8061c50c06ceb63919c55d556aeb1cf660cfb966e4211a.exe
Resource
win10v2004-20221111-en
General
-
Target
f21cc566e35b9b4a5f8061c50c06ceb63919c55d556aeb1cf660cfb966e4211a
-
Size
880KB
-
MD5
c684ec6213b3801c691bd4b976bd8801
-
SHA1
7c365b35a22d77b26124c2b1f58b12540c2dffb4
-
SHA256
f21cc566e35b9b4a5f8061c50c06ceb63919c55d556aeb1cf660cfb966e4211a
-
SHA512
267b0340d8a6c66415caae6b51bd293ef74d3fa2a27e0ff1713c96db828a2c53db1c47352ce4237259f23a472df1f75d6fdebf827c3d53708747bba5f2cfd059
-
SSDEEP
24576:6M1bY1ZmiR8gLkOW6QzxGycw66WEtMQcEMO5zueD:6MlYKFg1WDzrcQnFzfB
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f21cc566e35b9b4a5f8061c50c06ceb63919c55d556aeb1cf660cfb966e4211a.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 876KB - Virtual size: 880KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE