Behavioral task
behavioral1
Sample
6e03485ad68fef08dbbd72362077837399c6681520c948ceae60e62e96235657.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6e03485ad68fef08dbbd72362077837399c6681520c948ceae60e62e96235657.exe
Resource
win10v2004-20220901-en
General
-
Target
6e03485ad68fef08dbbd72362077837399c6681520c948ceae60e62e96235657
-
Size
57KB
-
MD5
9e62684040eccf714680783a024fcbbc
-
SHA1
61d32e71a9bffd400bab10be910fbf624c6731c6
-
SHA256
6e03485ad68fef08dbbd72362077837399c6681520c948ceae60e62e96235657
-
SHA512
be6bc169b1082d1edec13016d835de128437cc79fc1b1469961b5af96188c97d6d59d45d5f0d1c8b1f3769093f7877c47ee5909abcc74c14f7516a2ddfcc0dfb
-
SSDEEP
1536:LxNUpuxoJ8EJkWUKiSjgVyqm0cBSlkkUGqXUxw2J6nouy8:L/Up1WEJ2Khj30cBSYXAcout
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
6e03485ad68fef08dbbd72362077837399c6681520c948ceae60e62e96235657.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE