Behavioral task
behavioral1
Sample
cf29f3561b69cb38b45d2bb2c1b1a16d0d513b4b2db76f1c1468e0fdbd0e61c0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cf29f3561b69cb38b45d2bb2c1b1a16d0d513b4b2db76f1c1468e0fdbd0e61c0.exe
Resource
win10v2004-20220812-en
General
-
Target
cf29f3561b69cb38b45d2bb2c1b1a16d0d513b4b2db76f1c1468e0fdbd0e61c0
-
Size
196KB
-
MD5
d69cfe7749bfc7b635d0f75d735aa207
-
SHA1
5b497ac8a87657ba2157551c7d00e4be36c93e8b
-
SHA256
cf29f3561b69cb38b45d2bb2c1b1a16d0d513b4b2db76f1c1468e0fdbd0e61c0
-
SHA512
230b15d227042eef7ef87556961678973dea837bb6080804d52c254f2cb9af188db53ed9e56be3d7c562f47086b6c2d05c64b6019d2e9daf1bea43de93bb6f48
-
SSDEEP
3072:wuRfKUcImj91NCIEIasGMfS9XElAcb7ROJRF0O8kmqFk+IhqsUchMy8I4hout+qe:hD0buM6USC6OO8CJIicbKhoS+
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
cf29f3561b69cb38b45d2bb2c1b1a16d0d513b4b2db76f1c1468e0fdbd0e61c0.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 252KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 189KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE