Behavioral task
behavioral1
Sample
616741ba17d7a43c64510b1fbdaca947a164c4d4ef692cfb0454bcb5980c194a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
616741ba17d7a43c64510b1fbdaca947a164c4d4ef692cfb0454bcb5980c194a.exe
Resource
win10v2004-20220812-en
General
-
Target
616741ba17d7a43c64510b1fbdaca947a164c4d4ef692cfb0454bcb5980c194a
-
Size
2.1MB
-
MD5
e02b77559e6cb58a61319e9a47924e0c
-
SHA1
8c6219b84a4c8bc3e5bc375bcd3c1efaa12bee1a
-
SHA256
616741ba17d7a43c64510b1fbdaca947a164c4d4ef692cfb0454bcb5980c194a
-
SHA512
2f131d5c350f5f09bbc20953d516c64fd251bca5464db625d4d2b7c51337c3dade4337cac06abbf0782402d182efd80bc4ccb817a9c407d54759c800e9a9c193
-
SSDEEP
49152:eBxeHqryTRyH69JDlWH7Y6tI0YdZ6jSTB/9CCVUPnQl4hkorM:I2BTRy4JJWHc6tI0Yj7/9/VUPnc4hzr
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
616741ba17d7a43c64510b1fbdaca947a164c4d4ef692cfb0454bcb5980c194a.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE