Behavioral task
behavioral1
Sample
f26b544a70533017f34ba66a08960a283f8cc75f12b192a915e0d2c5d36a199d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f26b544a70533017f34ba66a08960a283f8cc75f12b192a915e0d2c5d36a199d.exe
Resource
win10v2004-20220901-en
General
-
Target
f26b544a70533017f34ba66a08960a283f8cc75f12b192a915e0d2c5d36a199d
-
Size
576KB
-
MD5
b0c1d20c6ad5c7c43dafb9d8baf10bf9
-
SHA1
8c1dd5cfa7ef1f19dc887da64dc12b37301cdea3
-
SHA256
f26b544a70533017f34ba66a08960a283f8cc75f12b192a915e0d2c5d36a199d
-
SHA512
7454c182d64574614753724208d8ea30830fe87390c33dd29f8e289192e65ccf6dad5eebbb4dce6d1a11f717afe4b627f38b278db7830ab2b48cd651453d63d5
-
SSDEEP
12288:8f8Gn2IBKuRUT8kGs5rtXGoNTUA3pYew1Hv51AvEizC:qnBKakGstWuTUfHv56c9
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f26b544a70533017f34ba66a08960a283f8cc75f12b192a915e0d2c5d36a199d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE