Behavioral task
behavioral1
Sample
c056a603bf900a169aa53a0f3803c3fe3a9a2db0d24452d9133ed2b78c3a776f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c056a603bf900a169aa53a0f3803c3fe3a9a2db0d24452d9133ed2b78c3a776f.exe
Resource
win10v2004-20220812-en
General
-
Target
c056a603bf900a169aa53a0f3803c3fe3a9a2db0d24452d9133ed2b78c3a776f
-
Size
246KB
-
MD5
8dd0a8f1424cc7af8c8d0cd8e685ea25
-
SHA1
2ec8604c117d18f6f8091271d59312d2274e69af
-
SHA256
c056a603bf900a169aa53a0f3803c3fe3a9a2db0d24452d9133ed2b78c3a776f
-
SHA512
8298db5e5b6dbe4bfeccd0109f33563e900dbba479fb2006cf9abc53bddc3f5c14e2720efdddf3bd92a7c634618013bd1cf73675a9e12d3a533497deac76b223
-
SSDEEP
6144:78nHhn0cdKhjdVM/oEp9pGtJrfGzqrSB:I2cgOom9ATDEqrS
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
c056a603bf900a169aa53a0f3803c3fe3a9a2db0d24452d9133ed2b78c3a776f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE