Behavioral task
behavioral1
Sample
af443ee8f706edbe600d5b5d1c9e3b0851c0cfc3a6e7ab02af4989bb8a1e56f1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
af443ee8f706edbe600d5b5d1c9e3b0851c0cfc3a6e7ab02af4989bb8a1e56f1.exe
Resource
win10v2004-20221111-en
General
-
Target
af443ee8f706edbe600d5b5d1c9e3b0851c0cfc3a6e7ab02af4989bb8a1e56f1
-
Size
310KB
-
MD5
a74f5f1fbfc14c1e38b008d73427c053
-
SHA1
cde31fea09bb9b6907d3cffad4d0135134024e96
-
SHA256
af443ee8f706edbe600d5b5d1c9e3b0851c0cfc3a6e7ab02af4989bb8a1e56f1
-
SHA512
6d3783ac94bcc78aed1c41eba749b7881086312d272f194e04b884f9d5a924f3969830e393281c1751cdcc69ffa9f58961b63f37ee3f3f5b7f8bb5e5f489e3fe
-
SSDEEP
6144:aF+FT3ONmJHzqQCL4w3uULlihI9P3c7qZdTGYFWlvkeyoSn:aeOU1T+xuEyI9P+2GC1oS
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
af443ee8f706edbe600d5b5d1c9e3b0851c0cfc3a6e7ab02af4989bb8a1e56f1.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 976KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 296KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE