Behavioral task
behavioral1
Sample
ab2b6628ffc820461a2db51cced2eec8f5669db4ee7c3b559411ed8d711c3a09.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ab2b6628ffc820461a2db51cced2eec8f5669db4ee7c3b559411ed8d711c3a09.exe
Resource
win10v2004-20221111-en
General
-
Target
ab2b6628ffc820461a2db51cced2eec8f5669db4ee7c3b559411ed8d711c3a09
-
Size
242KB
-
MD5
0d8582e650466566e5c33b105022b845
-
SHA1
e0de9bd9f5a6066252a59dc8c706da5539534079
-
SHA256
ab2b6628ffc820461a2db51cced2eec8f5669db4ee7c3b559411ed8d711c3a09
-
SHA512
a327554a60cdd7ddf2626f33c44b6b74b3b164b2b0e419e1566d5042fa37e36805cc0e48b0117fde252daee5216ee0c91c86563877e3fd33317bc0faaa31fcba
-
SSDEEP
6144:O+py+nXda5OMvi2OF9zut5sy4njaDdwaYDDzEnD:OCF9zvwD
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ab2b6628ffc820461a2db51cced2eec8f5669db4ee7c3b559411ed8d711c3a09.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE