Behavioral task
behavioral1
Sample
afb3a614b3ab094827b668bc2fc6c4c35038114c87e1c57bccf2d9411424ae0d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
afb3a614b3ab094827b668bc2fc6c4c35038114c87e1c57bccf2d9411424ae0d.exe
Resource
win10v2004-20221111-en
General
-
Target
afb3a614b3ab094827b668bc2fc6c4c35038114c87e1c57bccf2d9411424ae0d
-
Size
217KB
-
MD5
cb9fe5f4a567a1f3538caf97634d97cf
-
SHA1
0c0d136c1523d0e9cc0030040167897a8dba961e
-
SHA256
afb3a614b3ab094827b668bc2fc6c4c35038114c87e1c57bccf2d9411424ae0d
-
SHA512
ab4017f62a31073bb7f45ef605d13093a3a0a6a4f4a7c50439806a742c392101a65354cc79031eeaa58ed3a7f7f01e9fed79829b6c50f413d5a035df79ff34cf
-
SSDEEP
3072:jinv+u8DzN25qGhm11lvNAK8Zdb99ZNyoJQqFkCh16HhXgQ8rFFrOllBdMF1cWW7:mf5qGhcB5a1HKLCiBXCKjMIWk
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
afb3a614b3ab094827b668bc2fc6c4c35038114c87e1c57bccf2d9411424ae0d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 828KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 171KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE