Behavioral task
behavioral1
Sample
dcf64e0f31577eb4059ef8e1dd1f1475b0d7d6db7d92e2a498b129e6fee40127.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
dcf64e0f31577eb4059ef8e1dd1f1475b0d7d6db7d92e2a498b129e6fee40127.exe
Resource
win10v2004-20221111-en
General
-
Target
dcf64e0f31577eb4059ef8e1dd1f1475b0d7d6db7d92e2a498b129e6fee40127
-
Size
225KB
-
MD5
3baa827a14a876cc6c13bf74aebe05f5
-
SHA1
ee7d21dd60cdf3d6c9ed0cd580206b0a808d96a8
-
SHA256
dcf64e0f31577eb4059ef8e1dd1f1475b0d7d6db7d92e2a498b129e6fee40127
-
SHA512
7501ab75f8b7a6cb4870f0f69e01f4ab3ac69714c34244901e4a42f923013df20589a972482914bddc11769f4a8cd69bdb4d2118a6365a9543a4524f6026a799
-
SSDEEP
6144:W0u0m5vji88kypWx+QZL6t2DVLR/kqLZ:apF8k/xrZet2DM
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
dcf64e0f31577eb4059ef8e1dd1f1475b0d7d6db7d92e2a498b129e6fee40127.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 376KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 220KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE