Behavioral task
behavioral1
Sample
ded908fee5926002d8c78c8c7fec514c198b8145c78ac65e38f8f00f03e4ce58.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ded908fee5926002d8c78c8c7fec514c198b8145c78ac65e38f8f00f03e4ce58.exe
Resource
win10v2004-20220901-en
General
-
Target
ded908fee5926002d8c78c8c7fec514c198b8145c78ac65e38f8f00f03e4ce58
-
Size
155KB
-
MD5
533806bba3549243f5eff022659bb640
-
SHA1
5367007c341c369c5fa59879e000f00c5b154850
-
SHA256
ded908fee5926002d8c78c8c7fec514c198b8145c78ac65e38f8f00f03e4ce58
-
SHA512
a62dc6c6f768a4ca2e990d5f41b5d2b49b81e395a1884d9ad1ee69a8add34fb14667dd4e9c5b5db4d78ba53a1ace401c990fda3409de11309f25656cb8f90325
-
SSDEEP
3072:0wyyzLdoutIEAhzKECKaGGfuQuTvDM5y5+sDWn8BT5uNFTPwVOzkN:DyyzLdoSHAVC5/5y5+J8JM3O
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ded908fee5926002d8c78c8c7fec514c198b8145c78ac65e38f8f00f03e4ce58.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE