Behavioral task
behavioral1
Sample
fb04c5bddcc13af52c4fc9884e8e9444fe8fedce49ef5cd0c1c9e86a218c3926.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fb04c5bddcc13af52c4fc9884e8e9444fe8fedce49ef5cd0c1c9e86a218c3926.exe
Resource
win10v2004-20220812-en
General
-
Target
fb04c5bddcc13af52c4fc9884e8e9444fe8fedce49ef5cd0c1c9e86a218c3926
-
Size
201KB
-
MD5
98c17c06f1931abd8e75504d03d3c3d7
-
SHA1
250e0a1608a5914e8f5d422685cba09d7b5a9bf5
-
SHA256
fb04c5bddcc13af52c4fc9884e8e9444fe8fedce49ef5cd0c1c9e86a218c3926
-
SHA512
7ddd62725ce3cfb9c857e756f5d8ea7699706b85316bef21667863d90b515a0875d34e265d7fe980cfc48765112463334ee4ff0cdebfc79ac5736736f7144c70
-
SSDEEP
6144:wSygJXGtLg3U2+ReVUEkEc7zkY6I9d/7eoS:wSEO3vUEkEc7zkY6I9R7eoS
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
fb04c5bddcc13af52c4fc9884e8e9444fe8fedce49ef5cd0c1c9e86a218c3926.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE