Behavioral task
behavioral1
Sample
f28ab0a83f50e5a67a3091fe5477bf1e1aee47c501dfd73530699374316d9273.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f28ab0a83f50e5a67a3091fe5477bf1e1aee47c501dfd73530699374316d9273.exe
Resource
win10v2004-20220812-en
General
-
Target
f28ab0a83f50e5a67a3091fe5477bf1e1aee47c501dfd73530699374316d9273
-
Size
249KB
-
MD5
133148d0472015461f78f8d265b65413
-
SHA1
dfbb2ad14446903a692668f97c8a8171ab9714a0
-
SHA256
f28ab0a83f50e5a67a3091fe5477bf1e1aee47c501dfd73530699374316d9273
-
SHA512
364da322462efa6188db62a827fd45dae18a1e8ac4ffdd7bb2df213e0797d1aa62ec4ede99c77478cc55a7e6f864ecde4083733765291b9510da322183e34056
-
SSDEEP
6144:WkkqTv00ZIo4Abf4nN24dqT4GpPtJrcVeH8Okimow:tTBZIZqdWGpFJLH/ki
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f28ab0a83f50e5a67a3091fe5477bf1e1aee47c501dfd73530699374316d9273.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 214KB - Virtual size: 217KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata0 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA