Behavioral task
behavioral1
Sample
f601815df4791969ecac2f5bdc55d4228e533d6d6ad739a5249b557b7dedf2fe.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f601815df4791969ecac2f5bdc55d4228e533d6d6ad739a5249b557b7dedf2fe.exe
Resource
win10v2004-20221111-en
General
-
Target
f601815df4791969ecac2f5bdc55d4228e533d6d6ad739a5249b557b7dedf2fe
-
Size
379KB
-
MD5
f03478a27cf92f5c461c8c77abccd36f
-
SHA1
3b0f1e9de12f1e53052dc7b666cbe47812927503
-
SHA256
f601815df4791969ecac2f5bdc55d4228e533d6d6ad739a5249b557b7dedf2fe
-
SHA512
a6c7a66477c1ebeecff6f8288b602285d0f817bf30c35eecc09cab7baeaef1135b821404499bd3dbeba30dfdefab15c55e9d24f070e30f0088d0bfa4153ea191
-
SSDEEP
6144:eKiDrDb8Uw/Gv4bwCDTOhVkDXRu66f1MhqqxvMvl:hurX3vv4ML81ueqqevl
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f601815df4791969ecac2f5bdc55d4228e533d6d6ad739a5249b557b7dedf2fe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE