Behavioral task
behavioral1
Sample
af573adfa099cfc2695c7468d5b6f88c504a44020a9b4324a072b5a4abd017c5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
af573adfa099cfc2695c7468d5b6f88c504a44020a9b4324a072b5a4abd017c5.exe
Resource
win10v2004-20220901-en
General
-
Target
af573adfa099cfc2695c7468d5b6f88c504a44020a9b4324a072b5a4abd017c5
-
Size
205KB
-
MD5
6d6d468d703de251d626addb9da85f5b
-
SHA1
7439036df6b19b1bc8407c7a6aac713535c5ad83
-
SHA256
af573adfa099cfc2695c7468d5b6f88c504a44020a9b4324a072b5a4abd017c5
-
SHA512
3d0e0346eacf545b0fa4186278cdf0f5d56224243cdcb27dbf70296943dd88befa1282283b8d15660f541c902e5894e932d21dd50123dc4cdee2776b7eb7d447
-
SSDEEP
1536:0fDBNMuKN2EIrS9QRu7YwlS03jFh8GPLNl04OoHcP91xFZin3IDoRwbDi2pxP8:0MUPS9+6jU0hCgLNy+k1xynJwDi27U
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
af573adfa099cfc2695c7468d5b6f88c504a44020a9b4324a072b5a4abd017c5.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 60KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE