Behavioral task
behavioral1
Sample
ddbd8505062eb863afeffeeda69aed24b36e3f374a031650734e5363e38ab031.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ddbd8505062eb863afeffeeda69aed24b36e3f374a031650734e5363e38ab031.exe
Resource
win10v2004-20221111-en
General
-
Target
ddbd8505062eb863afeffeeda69aed24b36e3f374a031650734e5363e38ab031
-
Size
230KB
-
MD5
ca5fc19d7450500a3a18c6f8036cfefd
-
SHA1
7127f09ff4abdc9513de7191c4bc463d886d3fa1
-
SHA256
ddbd8505062eb863afeffeeda69aed24b36e3f374a031650734e5363e38ab031
-
SHA512
0fed42e6bfa07b78e60d78b9c2ecffeed5d7d941a503009f735b13ce44461a22ad5b16a3f2e62df57c5d4e725ef1ba73364151b55e486c243221f62f4c97e306
-
SSDEEP
6144:QugAlDk7KvjlDhPLLwgrFUEmqzYW1CNgpoSV:QrAlD1LLwgLbzYW1CNgpoSV
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ddbd8505062eb863afeffeeda69aed24b36e3f374a031650734e5363e38ab031.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 225KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE