Behavioral task
behavioral1
Sample
f96377469cdffbd5c577b6e0d17996e94a0fe69cc0b18d454465d36f1b9af155.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f96377469cdffbd5c577b6e0d17996e94a0fe69cc0b18d454465d36f1b9af155.exe
Resource
win10v2004-20220901-en
General
-
Target
f96377469cdffbd5c577b6e0d17996e94a0fe69cc0b18d454465d36f1b9af155
-
Size
45KB
-
MD5
2f5eb1b3bdb7a5790959f058aeb5352d
-
SHA1
a56d26197c256bfa93fe31b548cf916227536fff
-
SHA256
f96377469cdffbd5c577b6e0d17996e94a0fe69cc0b18d454465d36f1b9af155
-
SHA512
cf20f5fc25b6ba75b3fd3931fdf205b5d238a2b684c2622b311ca7c9e6e4da36aa7120e31c49558daf743d44ad2a771f664720785d5a993447838b18ccd1a045
-
SSDEEP
768:vGz7jYlLYDFcxAoTnfWAkyTOOLTjJRnJAQ66Zr/Lu:mILKAfWARTbLlAT6ZTL
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f96377469cdffbd5c577b6e0d17996e94a0fe69cc0b18d454465d36f1b9af155.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE