Behavioral task
behavioral1
Sample
faf5038c68b9a559750124a24b5a427a471369f155935fa0813daa93c4bdaeda.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
faf5038c68b9a559750124a24b5a427a471369f155935fa0813daa93c4bdaeda.exe
Resource
win10v2004-20221111-en
General
-
Target
faf5038c68b9a559750124a24b5a427a471369f155935fa0813daa93c4bdaeda
-
Size
44KB
-
MD5
d46fcbaab70d460871835ab7741db318
-
SHA1
44ffef02ef281217e76ad6ce0e2187eb53121216
-
SHA256
faf5038c68b9a559750124a24b5a427a471369f155935fa0813daa93c4bdaeda
-
SHA512
fa2a61912761fbf1a61ef59d019553a105070526cf4edef5827ce56d4cf5e693e22c83b6bde43690d6cfd7efda2b016816197e7211a4e1af8a89dc82c999a2cd
-
SSDEEP
768:S6VOcQgE16d8HRPm9PVHgbYYEbaz62gFGqgZym20Z70qyYc9k3bKc4+1zKweWBe6:PYOE+8HN4Ppgabaz62gFEwm3x0qyNL+b
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
faf5038c68b9a559750124a24b5a427a471369f155935fa0813daa93c4bdaeda.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�PX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE