Behavioral task
behavioral1
Sample
f0bfc9829afd02ff87689cf0176aa3a157dd3cfcf2e2ffe7b9fb776eeadffe15.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f0bfc9829afd02ff87689cf0176aa3a157dd3cfcf2e2ffe7b9fb776eeadffe15.exe
Resource
win10v2004-20220812-en
General
-
Target
f0bfc9829afd02ff87689cf0176aa3a157dd3cfcf2e2ffe7b9fb776eeadffe15
-
Size
136KB
-
MD5
efea1e405f0c2eb8414ec9474d825024
-
SHA1
70eca0a8e68a1198edba4946c87929e384a3d307
-
SHA256
f0bfc9829afd02ff87689cf0176aa3a157dd3cfcf2e2ffe7b9fb776eeadffe15
-
SHA512
24ecc91ed5a5e488c2c9c0486f278680ef7602fa4b5c0b10ac610b14b1be2d6840f291daffb2055749d6f203c0b08ea0012028905dee354c3a3d4030840ba180
-
SSDEEP
3072:Gjq6ZqTzpONJLaf2QWfr2FXYERuwQp/R:Gjq6ZqQJLafbWfr2BtRuf
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f0bfc9829afd02ff87689cf0176aa3a157dd3cfcf2e2ffe7b9fb776eeadffe15.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE