Behavioral task
behavioral1
Sample
c6f8c797cec2e4765b6029986e6b2fcf7fd79f6109675465e8b39a5256dd6e9d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c6f8c797cec2e4765b6029986e6b2fcf7fd79f6109675465e8b39a5256dd6e9d.exe
Resource
win10v2004-20221111-en
General
-
Target
c6f8c797cec2e4765b6029986e6b2fcf7fd79f6109675465e8b39a5256dd6e9d
-
Size
11KB
-
MD5
b0c00de0d33ba1ebc2ce4e082c8b800e
-
SHA1
6413a702d8bbb823bec69c6111d10aef348ea7ba
-
SHA256
c6f8c797cec2e4765b6029986e6b2fcf7fd79f6109675465e8b39a5256dd6e9d
-
SHA512
37f1bdece55fa9a4f1a0b7a564ff45827c91f0bc26cae1c2f389706694917b7f555ad638d80f4f3887de18269bd79da176e0f5a74c49e80efa2ef43b140761db
-
SSDEEP
192:HCZP5+DwcGBixP3hGRSEFaNJhLkwcud2DH9VwGfct3pby4KDRW:iZPKwcGBi9xGIQaNJawcudoD7UXb5KDc
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
c6f8c797cec2e4765b6029986e6b2fcf7fd79f6109675465e8b39a5256dd6e9d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE