Behavioral task
behavioral1
Sample
cda05c58a8180ba410371b0b075a2aaa1de3f2ff6483ff707f62c16af09974a9.exe
Resource
win7-20221111-en
General
-
Target
cda05c58a8180ba410371b0b075a2aaa1de3f2ff6483ff707f62c16af09974a9
-
Size
1.1MB
-
MD5
f92d5a0664adea31c15387a2343d8c0d
-
SHA1
bd7b0384f51803e514946a94bee65e061977b698
-
SHA256
cda05c58a8180ba410371b0b075a2aaa1de3f2ff6483ff707f62c16af09974a9
-
SHA512
62d39f98fbecaacb5be715cbb90e672a72e6c0fcca40f25716a39e8a724de06b02ca935ae7da4138f88bca16c8cf0379f081e64190408450f769e9c18bf497db
-
SSDEEP
24576:NLcgB5BSo4lxhuL3+rMWQXVWAZuFG5s5e8aHT+2TWqtFUCQMMDm:NI+5BSo4P6WAZra5e8aHT+2TJFUFMMi
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
cda05c58a8180ba410371b0b075a2aaa1de3f2ff6483ff707f62c16af09974a9.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 596KB - Virtual size: 596KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 524KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE