Behavioral task
behavioral1
Sample
f21d8a6c520ec4399b3a1caed6cc35130381e6385e46afc71c2a957d5f2eba9e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f21d8a6c520ec4399b3a1caed6cc35130381e6385e46afc71c2a957d5f2eba9e.exe
Resource
win10v2004-20221111-en
General
-
Target
f21d8a6c520ec4399b3a1caed6cc35130381e6385e46afc71c2a957d5f2eba9e
-
Size
12KB
-
MD5
2f63e66a355a92950761e59310c704ff
-
SHA1
941683623659c2a2c99716a1d6c2938eff17147f
-
SHA256
f21d8a6c520ec4399b3a1caed6cc35130381e6385e46afc71c2a957d5f2eba9e
-
SHA512
cf3d386d92996da3f4a740f4bc169c3302ddfeb97eacf7388fb3d9715a84bd6be0ee68c394d3bd3484ca0b09a0cd797dba15d8a98dcaab3ecb9b6ddaa90ffae6
-
SSDEEP
384:6ABEX5WRDYaNJawcudoD7UkkE/JMGr1BbkY31kT:6ABsslxnbcuyD7Ue/eGrYY3u
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f21d8a6c520ec4399b3a1caed6cc35130381e6385e46afc71c2a957d5f2eba9e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE