Behavioral task
behavioral1
Sample
dee02223eec568297182f3e8461ce559f2eb06b2048575310fbbc1e99b55851a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
dee02223eec568297182f3e8461ce559f2eb06b2048575310fbbc1e99b55851a.exe
Resource
win10v2004-20220901-en
General
-
Target
dee02223eec568297182f3e8461ce559f2eb06b2048575310fbbc1e99b55851a
-
Size
21KB
-
MD5
1787b70fe27020733af6563add89e28a
-
SHA1
1401ff71b25b8c0209e89cd8afc8290a91148636
-
SHA256
dee02223eec568297182f3e8461ce559f2eb06b2048575310fbbc1e99b55851a
-
SHA512
df9f88b693ad153d3a32b86c706c39638ced3299db3e74e3eb43e5400b845a4a94a242a73e63b5c424c21b122f6dceb416b7519ae1ad5ede322888e4ac3a8a4e
-
SSDEEP
384:Id5BIDBKkYJqEGacS0hy5MDEo1su+nV65Dft+lsaW+TkdzEO9QdxYK:25BGg09h7wKIoezGJm2IO9Qs
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
dee02223eec568297182f3e8461ce559f2eb06b2048575310fbbc1e99b55851a.exe windows x86
820ab24e53af2dbafc74d24f87e40262
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
comctl32
InitCommonControls
kernel32
LoadLibraryA
GetProcAddress
Sections
UPX! Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX! Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX! Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX! Size: 17KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE