Behavioral task
behavioral1
Sample
64917b361ed0bb0f7c899507b8fb72c09866c2bdd43554889a8dd75bd895fa0c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
64917b361ed0bb0f7c899507b8fb72c09866c2bdd43554889a8dd75bd895fa0c.exe
Resource
win10v2004-20220812-en
General
-
Target
64917b361ed0bb0f7c899507b8fb72c09866c2bdd43554889a8dd75bd895fa0c
-
Size
3.0MB
-
MD5
cbbfb21fc20fa94b3881cdf56844107c
-
SHA1
cf82aa7f2ab1afceb1078ec0a98be01a13e92ee3
-
SHA256
64917b361ed0bb0f7c899507b8fb72c09866c2bdd43554889a8dd75bd895fa0c
-
SHA512
fb81d51d0d312b3a51a55f555f3328a69dd601af5207435bc5c473a95010e722803873adb1fabc0ee181690490d573833c7787f52481a7bcf5ccfe9a65864d0d
-
SSDEEP
49152:wDvZe5keOJ8h/GG1vFuqOG86TXt9XSbH4qstWiHQ9SH5xT0QvWx16BM8E9x8Mprt:wDvgWJ8h+rrF4/X7HQyCQvWx1wM8zi++
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
64917b361ed0bb0f7c899507b8fb72c09866c2bdd43554889a8dd75bd895fa0c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qnk Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE