Behavioral task
behavioral1
Sample
db244ec32952c293c226a655067185e9ae54a54aaca986a17be8e97b4035bf8a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
db244ec32952c293c226a655067185e9ae54a54aaca986a17be8e97b4035bf8a.exe
Resource
win10v2004-20220901-en
General
-
Target
db244ec32952c293c226a655067185e9ae54a54aaca986a17be8e97b4035bf8a
-
Size
563KB
-
MD5
3649228a712e1f779cd9105fbb87dd5f
-
SHA1
b0bef992df1b3fc145fe35f88d101000343c3b73
-
SHA256
db244ec32952c293c226a655067185e9ae54a54aaca986a17be8e97b4035bf8a
-
SHA512
af761f82cade36d86e45d88ec4834a9a6123f239bd3f3e82b60f4769fd8ca293082d228b2eedc682c41502b1cc1179108f0217c47cdef0cfa0946b3c2f7cb9ad
-
SSDEEP
12288:4uccUkmqm1K7vGXjBxoOR8D4V/hhnl3d6EyMDr:ccBK4vGT8O3/GVM/
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
db244ec32952c293c226a655067185e9ae54a54aaca986a17be8e97b4035bf8a.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 108KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE