Behavioral task
behavioral1
Sample
dbab2897411ec010c8062d9277158747f2780cda195c532ba0370d1298c192c8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dbab2897411ec010c8062d9277158747f2780cda195c532ba0370d1298c192c8.exe
Resource
win10v2004-20220812-en
General
-
Target
dbab2897411ec010c8062d9277158747f2780cda195c532ba0370d1298c192c8
-
Size
435KB
-
MD5
ff11c0aeae8a0f4a53c7942935d8e46f
-
SHA1
6f8b59a38a17974b65f2c2a19a2db7517daaaba9
-
SHA256
dbab2897411ec010c8062d9277158747f2780cda195c532ba0370d1298c192c8
-
SHA512
3317cd30a362205f082d4ec663cf6410c8f30428e5d6137199e9f254d026c7e1ea9d542917681142ab0aa7dc289038cd69cc7d007e84ff8ccb88f4d5f41c5aa4
-
SSDEEP
12288:o338aUaZG8Yvf87rPvbhfgYz+B7fsvF7A0HTjZELzSocys/mT1a/omvaBFMnTx+e:zRe
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
dbab2897411ec010c8062d9277158747f2780cda195c532ba0370d1298c192c8.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 360KB - Virtual size: 360KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE