Behavioral task
behavioral1
Sample
acd17b5550ab57e9e1711598ac34317ed1637904d4e4a52e2c7e032dc03355f5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
acd17b5550ab57e9e1711598ac34317ed1637904d4e4a52e2c7e032dc03355f5.exe
Resource
win10v2004-20220901-en
General
-
Target
acd17b5550ab57e9e1711598ac34317ed1637904d4e4a52e2c7e032dc03355f5
-
Size
88KB
-
MD5
5e956822ee49664f6d8988e37ce545cb
-
SHA1
0030e0a5cb18a78eb6a28f20a187c8f1c7e058f4
-
SHA256
acd17b5550ab57e9e1711598ac34317ed1637904d4e4a52e2c7e032dc03355f5
-
SHA512
0122a59dc9abf5a47ce15e93f6e692ccc3c86417eb022fefbb29b16b1f171015d75f8af31f31c540960b7fdd13314cb465db99d3f3e3fa9d33964a13248cda4b
-
SSDEEP
1536:UlnsOv++VhuoRI30KXtFBm6MJnDNOKy4cdzcm9f08o:U8quMsdFBmdnpOP4cnlo
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
acd17b5550ab57e9e1711598ac34317ed1637904d4e4a52e2c7e032dc03355f5.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ExeS Size: 36KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yhikown Size: - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qtxxrkx Size: - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
comvoot Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE