Behavioral task
behavioral1
Sample
dbfd5492a1cc21da999f988f94e9709f5171dc990bf0708839b5ab3df947e445.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dbfd5492a1cc21da999f988f94e9709f5171dc990bf0708839b5ab3df947e445.exe
Resource
win10v2004-20220812-en
General
-
Target
dbfd5492a1cc21da999f988f94e9709f5171dc990bf0708839b5ab3df947e445
-
Size
495KB
-
MD5
11bdc15c539110d1c772f743ee2fa2ee
-
SHA1
2857c0e9eca5b80ac8634e5ff37c4ba113dadb0c
-
SHA256
dbfd5492a1cc21da999f988f94e9709f5171dc990bf0708839b5ab3df947e445
-
SHA512
c513932bc2de43d84c8a030b61bb04d627a864451802a860d3aed9266e9c9b4bd5b9e28fef4b5ded591dd89f593cf28ab3dee4105e27f5ef351b5f3c840e878f
-
SSDEEP
12288:gTUtexh+7CHpL/+cpVt7/m0RsNswYJbw0D4YkBrwCoSs:g0s+az+cpV5/m0sWwYJbwfxW
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
dbfd5492a1cc21da999f988f94e9709f5171dc990bf0708839b5ab3df947e445.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 491KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE