Behavioral task
behavioral1
Sample
f1ebab32eaa1f417350f1a2c34c742b6bb72887f7813014674f5f9a97936d02f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f1ebab32eaa1f417350f1a2c34c742b6bb72887f7813014674f5f9a97936d02f.exe
Resource
win10v2004-20220812-en
General
-
Target
f1ebab32eaa1f417350f1a2c34c742b6bb72887f7813014674f5f9a97936d02f
-
Size
156KB
-
MD5
bc2302f1bac4137908a89b68cf12c8d1
-
SHA1
7deec8f2963ac76ace60ac8f239a7219bb4cce7f
-
SHA256
f1ebab32eaa1f417350f1a2c34c742b6bb72887f7813014674f5f9a97936d02f
-
SHA512
84f4c31389fb7571d0923f5777724a270b9e73bb858243bcee204d4c73115f4186d552e15eafa961b39e7db46550a762c0e1bce0eff7ceddf8e458c8be64560e
-
SSDEEP
3072:fvf4LGz5LscWAzQglLROtSnc9KNMqfnu//dLqJV2YVH:QLAlWA3ituluVqJIoH
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f1ebab32eaa1f417350f1a2c34c742b6bb72887f7813014674f5f9a97936d02f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 77KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA