Behavioral task
behavioral1
Sample
a61f5dbf12f9a6c81e53dc6c8d3edc13eecfaa3ec558b5ff0a82652bd17fd1ea.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a61f5dbf12f9a6c81e53dc6c8d3edc13eecfaa3ec558b5ff0a82652bd17fd1ea.exe
Resource
win10v2004-20221111-en
General
-
Target
a61f5dbf12f9a6c81e53dc6c8d3edc13eecfaa3ec558b5ff0a82652bd17fd1ea
-
Size
300KB
-
MD5
bc848457e2060bb0d999e2fc5921d82a
-
SHA1
6c2ab9f2d7b55354dc496d07bd895ad80492375d
-
SHA256
a61f5dbf12f9a6c81e53dc6c8d3edc13eecfaa3ec558b5ff0a82652bd17fd1ea
-
SHA512
eb482ab9062518ecafad1e390c47794871932d631007125eb4b4e0487af42c13839a4761b38f2277f60070859b1a53d3fcab2e1bad4f20f29020a3191a789794
-
SSDEEP
6144:pgEJdEPlTTsEl4Lpt1fL55UuN1VwlviY/TxBVWSU9LGV1k:pgEJdEPlTTsEl4LZL8uJwr1BVWtM
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
a61f5dbf12f9a6c81e53dc6c8d3edc13eecfaa3ec558b5ff0a82652bd17fd1ea.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 197KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE