Behavioral task
behavioral1
Sample
ca92db7d04edbdeb13063eb25361a388986ffa605e3268c49d6452d9355cfbcd.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ca92db7d04edbdeb13063eb25361a388986ffa605e3268c49d6452d9355cfbcd.exe
Resource
win10v2004-20220812-en
General
-
Target
ca92db7d04edbdeb13063eb25361a388986ffa605e3268c49d6452d9355cfbcd
-
Size
43KB
-
MD5
2c1b93e0d5cb234601d1df1fed8dd98d
-
SHA1
5e475cae0c1f19e186531caad179beab2e5d683b
-
SHA256
ca92db7d04edbdeb13063eb25361a388986ffa605e3268c49d6452d9355cfbcd
-
SHA512
593e7df5c163a6f3b05f1245b5ee4de165ec42712e104a3ad8b71965c286a32448f310abf406502e4d1be52ba0c5c584454b45d7d9e39244f5b18a1ea6d6b837
-
SSDEEP
768:ia6s4+z8jz3eHnQFjvA7GbU2JpGLJD/rUu0KC9QdQl59JS9h140zJBjoofX:BH8H3eHnQZAJZTFa7PG1BJBlX
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ca92db7d04edbdeb13063eb25361a388986ffa605e3268c49d6452d9355cfbcd.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE