Behavioral task
behavioral1
Sample
af42228b31e8cd58d547607cad8b1f4c46e7c35c3bbbd13d06e746fb901c6362.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
af42228b31e8cd58d547607cad8b1f4c46e7c35c3bbbd13d06e746fb901c6362.exe
Resource
win10v2004-20221111-en
General
-
Target
af42228b31e8cd58d547607cad8b1f4c46e7c35c3bbbd13d06e746fb901c6362
-
Size
785KB
-
MD5
69ec9b4988dd1694eab9bd3817363e4d
-
SHA1
6205fcca54c142a28d52da379b72dae26d6b3b80
-
SHA256
af42228b31e8cd58d547607cad8b1f4c46e7c35c3bbbd13d06e746fb901c6362
-
SHA512
8d4ac642bd3967bf3165e48ea9bbe5f077ae6aa477c2bb4e3be12cf7613074a20e8c5adac3eac59e5e652e3a1db2863522b79164f4b0990a9cae4989d7e56f0b
-
SSDEEP
12288:yi6A/oK9FkP6FyTdgC0yVHn5WdadvHUNld6OMsm1hZhJ5oS3mfYsZQjuBqAaLM:MKZEwyANluRZHS3QKBMM
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
af42228b31e8cd58d547607cad8b1f4c46e7c35c3bbbd13d06e746fb901c6362.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 458KB - Virtual size: 460KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 325KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE