Behavioral task
behavioral1
Sample
ab04b8956b3356320990fe6088f0fdab70a23a243868f45197a8a0723f5c53c7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ab04b8956b3356320990fe6088f0fdab70a23a243868f45197a8a0723f5c53c7.exe
Resource
win10v2004-20220812-en
General
-
Target
ab04b8956b3356320990fe6088f0fdab70a23a243868f45197a8a0723f5c53c7
-
Size
56KB
-
MD5
f11d9a89655294a6dcecaeded104c8b0
-
SHA1
f9b3b4654ce9c005b00c72f07d074b6382b7dc91
-
SHA256
ab04b8956b3356320990fe6088f0fdab70a23a243868f45197a8a0723f5c53c7
-
SHA512
12149eb6d191a2ad8292b9963648304f70b842d495ade67fcbaf92c48217ebef2433c193da85eecb36b8f42cca0963a304f724b145ea3bb833188ea90418ea5a
-
SSDEEP
1536:DA7IbAvqZ2ivUuvk5vliAawkw97t++Db5KGd0:s7Ib4K2icSeQARk4t+MLe
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ab04b8956b3356320990fe6088f0fdab70a23a243868f45197a8a0723f5c53c7.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yC Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE