Behavioral task
behavioral1
Sample
a54a36c00ffa49c50824cfc4e3a4d5167d425089c832f0d74f76ac9b4bd8fdd9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a54a36c00ffa49c50824cfc4e3a4d5167d425089c832f0d74f76ac9b4bd8fdd9.exe
Resource
win10v2004-20221111-en
General
-
Target
a54a36c00ffa49c50824cfc4e3a4d5167d425089c832f0d74f76ac9b4bd8fdd9
-
Size
98KB
-
MD5
bfa096d8df87ed3bf1dc108bc4f1668b
-
SHA1
145c3b018f38efc9f979e2add9e9a1e2fdbae207
-
SHA256
a54a36c00ffa49c50824cfc4e3a4d5167d425089c832f0d74f76ac9b4bd8fdd9
-
SHA512
37f4550ef15e8c8cb398cbfebe91d247ddf80ee393583d8eeb53267c81f889a91b0492713191740c87eb86d75ab835e7ddf64cbfca9c7e956b77cc43e0d8d7ec
-
SSDEEP
3072:m2NGbymde5P3+1lySfOld+GsQsjdqXESsLuG:5NG9i3+yS26NCESsLB
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
a54a36c00ffa49c50824cfc4e3a4d5167d425089c832f0d74f76ac9b4bd8fdd9.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE