Behavioral task
behavioral1
Sample
fbbeff8c2fb957ec5f2dbcff867fde0d4f19b3b2615d17c78e260855f7d1f12e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fbbeff8c2fb957ec5f2dbcff867fde0d4f19b3b2615d17c78e260855f7d1f12e.exe
Resource
win10v2004-20221111-en
General
-
Target
fbbeff8c2fb957ec5f2dbcff867fde0d4f19b3b2615d17c78e260855f7d1f12e
-
Size
50KB
-
MD5
ebef24580eabfdfe6a7271c01cad86d4
-
SHA1
cbcf4f1d0b59a2816f64d3de03f9659dd7fbfde7
-
SHA256
fbbeff8c2fb957ec5f2dbcff867fde0d4f19b3b2615d17c78e260855f7d1f12e
-
SHA512
16f676b096d118abf8edad0a60e511c074d79023115a366260381f1f2300823600c17c1edfd6fec33a85dcfed80df44e817e41b4c40d5c6c528611198a21c280
-
SSDEEP
1536:IidBBx1zojmj+Y6sFE39TJI6JaOGKBNnouy8y:IidBnrD6JNGsaOG4outy
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
fbbeff8c2fb957ec5f2dbcff867fde0d4f19b3b2615d17c78e260855f7d1f12e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE