Behavioral task
behavioral1
Sample
ca2519eaa33c28f9994079f1705af2d8a328b03ec84ba67191e4093d09abea56.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ca2519eaa33c28f9994079f1705af2d8a328b03ec84ba67191e4093d09abea56.exe
Resource
win10v2004-20221111-en
General
-
Target
ca2519eaa33c28f9994079f1705af2d8a328b03ec84ba67191e4093d09abea56
-
Size
646KB
-
MD5
7e9a60fff03f70940c7a836b77b78095
-
SHA1
ae0e566812e44ad3c2cd5b31aa9e36eeef2ee3b6
-
SHA256
ca2519eaa33c28f9994079f1705af2d8a328b03ec84ba67191e4093d09abea56
-
SHA512
4cbdd18b3b9d0f1c9c44ebd6af89da5c9fade25877539e8ca76ce4763f3c6f8a2ff45880815f7cd3beec597aafe9fe21abaed327632d0ac44eba283509b04db9
-
SSDEEP
12288:OaPgaVnVdH700W11laSu1wFZSeWjuKdtbpA1mrahYJfuy0K/e2h8C3QG:xgImfaq9KWmrhfmh2GC3QG
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ca2519eaa33c28f9994079f1705af2d8a328b03ec84ba67191e4093d09abea56.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 567KB - Virtual size: 568KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE