Behavioral task
behavioral1
Sample
f296504f341730579601dc3baeb814dc970db1cfdaa8d66828e7ccfe2b77b892.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f296504f341730579601dc3baeb814dc970db1cfdaa8d66828e7ccfe2b77b892.exe
Resource
win10v2004-20220812-en
General
-
Target
f296504f341730579601dc3baeb814dc970db1cfdaa8d66828e7ccfe2b77b892
-
Size
420KB
-
MD5
714b704aaf8a0c194b33b7607de15246
-
SHA1
8df893de4c05c616158cc937324d9b0efee59acb
-
SHA256
f296504f341730579601dc3baeb814dc970db1cfdaa8d66828e7ccfe2b77b892
-
SHA512
366d7ec5f33614761e4d6fb439ee92f2e86e8e8f2ffc34b9330bea9c1c83551ecb462ecb9e2d3d15422aebbf69245b332b3e8a2ca44a628890dff716455c0b68
-
SSDEEP
3072:VHtSR9SwoeDgKAZZA+SSV+AnNiYOEMuD1/BGHE6Ilz7X81JlCus8+oXt:VNSR13AZa+3+AVOEMyByF1Jl/d
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f296504f341730579601dc3baeb814dc970db1cfdaa8d66828e7ccfe2b77b892.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 248KB - Virtual size: 248KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 110KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE