Behavioral task
behavioral1
Sample
a2048a2cc88428586cefba2a917628870672b5d55f69b3304858e796d80401f4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a2048a2cc88428586cefba2a917628870672b5d55f69b3304858e796d80401f4.exe
Resource
win10v2004-20220812-en
General
-
Target
a2048a2cc88428586cefba2a917628870672b5d55f69b3304858e796d80401f4
-
Size
360KB
-
MD5
b3620af13caf61899527eefdf1d480f4
-
SHA1
4bc4e2d72aa25e7ca4c7e4715361cb212276d70c
-
SHA256
a2048a2cc88428586cefba2a917628870672b5d55f69b3304858e796d80401f4
-
SHA512
71253e202b9c3c769d39c0b1a7e0547fefa4a4ff57f6e3567c8b0f394d678459ad877705976f7a5ddd39a8bfd9bdf6a26220900b90862f37b6cbf0365f861228
-
SSDEEP
6144:Hc9WgRW/knqNzenrsMNZs/Sp5mWp296aFBtweGQA8OoSk/4Uy7nzlb8WM8xJZstV:8pRHpNZN9p296aFYZ8OoSz7zlAWTPstV
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
a2048a2cc88428586cefba2a917628870672b5d55f69b3304858e796d80401f4.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 512KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 228KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ultra Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ