Behavioral task
behavioral1
Sample
f15f4c5fb7672a7fb05c307b62672f8000d2a8470b09977c865654f551dbe501.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f15f4c5fb7672a7fb05c307b62672f8000d2a8470b09977c865654f551dbe501.exe
Resource
win10v2004-20220901-en
General
-
Target
f15f4c5fb7672a7fb05c307b62672f8000d2a8470b09977c865654f551dbe501
-
Size
176KB
-
MD5
e6733a1007508ad7d31eb0c9288163e1
-
SHA1
0f96db67e7f7a1a6b0337fc9115572bfeab18f4f
-
SHA256
f15f4c5fb7672a7fb05c307b62672f8000d2a8470b09977c865654f551dbe501
-
SHA512
1d2962ad53f3de479cd4e8f7ecf358e0457cd3efede192e1e0de5c76f52f8bc2d889356803b73c18eed40a8d2e35e628e7d3d6cc2bbebd01c7404aae9657b46e
-
SSDEEP
3072:XB829B5TpDnq2gKkbb+NjI0s8cCecLG2VPjNXx+ak2rFRosLTYIxuya9a0:XN9le2gKGitb3XUvULTe40
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f15f4c5fb7672a7fb05c307b62672f8000d2a8470b09977c865654f551dbe501.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 300KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 171KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE