Behavioral task
behavioral1
Sample
f928aa1c4d85455f2147e8d49acb9845b00529c295afaa8243fb19bf1455af82.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f928aa1c4d85455f2147e8d49acb9845b00529c295afaa8243fb19bf1455af82.exe
Resource
win10v2004-20221111-en
General
-
Target
f928aa1c4d85455f2147e8d49acb9845b00529c295afaa8243fb19bf1455af82
-
Size
3.4MB
-
MD5
ab0a9d0f793654dc9b21d9ce1fff680c
-
SHA1
291fdf001f554bfd410bde9f04528ba8e380881d
-
SHA256
f928aa1c4d85455f2147e8d49acb9845b00529c295afaa8243fb19bf1455af82
-
SHA512
fd95689a0c51a12b79e0e7ce719136d73c595a5e4151a37003ad2f21bc94a253c8553c774ec611a925c0cddd560c4114f2f2aa65fc4d4541f1254a8de9b633c0
-
SSDEEP
49152:CwOEbO4H2deRhxTX8i/IsxhV7R7ok1SbMLy0jdVoR0LTg+fCPc6nUGpamblvHq:CwnHieRLIOz17ochOydV9TgvkAJpaOC
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f928aa1c4d85455f2147e8d49acb9845b00529c295afaa8243fb19bf1455af82.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1022KB - Virtual size: 1021KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.UPX0 Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ