Behavioral task
behavioral1
Sample
f5336a17af1c07f1e3c2a299639d1609f4f71ad99de4d63e4d0370750282c6e6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f5336a17af1c07f1e3c2a299639d1609f4f71ad99de4d63e4d0370750282c6e6.exe
Resource
win10v2004-20221111-en
General
-
Target
f5336a17af1c07f1e3c2a299639d1609f4f71ad99de4d63e4d0370750282c6e6
-
Size
311KB
-
MD5
2104d1abcae09f88dd00217928c2ab0e
-
SHA1
fbce642d829270c4d6f5c3c809d92af4b22ff8ae
-
SHA256
f5336a17af1c07f1e3c2a299639d1609f4f71ad99de4d63e4d0370750282c6e6
-
SHA512
73686f3474daa75c9258df3c1fa0a43fae3149ee182448e46af61c3986da99771eeced0f4b4dad123d8af7739e235d2341e86bff5ac3269a269c4b29b6e4c106
-
SSDEEP
6144:hUtwVTJ+9PUGBYGsND+z+qCcsXUAC76VOViI+KrfWFWJ0OEi:hX5w9PnBYbQiqsE6VOPfmy
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f5336a17af1c07f1e3c2a299639d1609f4f71ad99de4d63e4d0370750282c6e6.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 296KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 307KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE