Behavioral task
behavioral1
Sample
a066fd9fe0c9672e1d8dc2e9d30b489be7a6601e65d99cdd0fc6725f53449945.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a066fd9fe0c9672e1d8dc2e9d30b489be7a6601e65d99cdd0fc6725f53449945.exe
Resource
win10v2004-20221111-en
General
-
Target
a066fd9fe0c9672e1d8dc2e9d30b489be7a6601e65d99cdd0fc6725f53449945
-
Size
47KB
-
MD5
1ea7964d4f930774630ea115d1b8bc16
-
SHA1
00037dd8f098367fd39cbc80b7d72c1d5858220f
-
SHA256
a066fd9fe0c9672e1d8dc2e9d30b489be7a6601e65d99cdd0fc6725f53449945
-
SHA512
e3892dd98df11608cd81d256144102624c92b58c4fecf261857b14ef88eb5f269f98b9260bfbd0efdb9157549046df865f2c842f0d3725614e6052343d929e54
-
SSDEEP
768:pzGk6bj2mSp13rgGkiiiiiii0GQ50B+24zLEtKIyQ9:pCnV8xrhkiiiiiiiht140r
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
a066fd9fe0c9672e1d8dc2e9d30b489be7a6601e65d99cdd0fc6725f53449945.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE