Behavioral task
behavioral1
Sample
cf0948af122c4024e436668fc1868338d98a65eb087e47c6d4df0064fa6afee1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cf0948af122c4024e436668fc1868338d98a65eb087e47c6d4df0064fa6afee1.exe
Resource
win10v2004-20220812-en
General
-
Target
cf0948af122c4024e436668fc1868338d98a65eb087e47c6d4df0064fa6afee1
-
Size
49KB
-
MD5
d33bb698bf3e0a6701f219d524971115
-
SHA1
8cd6126482215498f86b089bc5a70b28f3ca4aa0
-
SHA256
cf0948af122c4024e436668fc1868338d98a65eb087e47c6d4df0064fa6afee1
-
SHA512
683b3103350fe9325d977b314f19732a1aa08ff7968cf91cd89e9c636aca5489b4e3b3bbec04ac7c8e8d7a81da491030f66410a126798e3d9674d18406b5d2d9
-
SSDEEP
384:qVgGUAgug2v9L0p/Wtw1S6TfxhWVggQo8ZcYQG7Rc4pzle9aJKApaxCCUNCgushU:Yf/gug2vSp/SOWVgg78ZcYQGfZoTAygy
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
cf0948af122c4024e436668fc1868338d98a65eb087e47c6d4df0064fa6afee1.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE