Behavioral task
behavioral1
Sample
ff72529bf3121912e0205ad2e313571d96d843b64b4547d34829ea2623600714.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ff72529bf3121912e0205ad2e313571d96d843b64b4547d34829ea2623600714.exe
Resource
win10v2004-20220812-en
General
-
Target
ff72529bf3121912e0205ad2e313571d96d843b64b4547d34829ea2623600714
-
Size
3.8MB
-
MD5
11322752a40ca3bc9d8b98919787aaea
-
SHA1
8fa789dab14b5c65d4ed6e03c6b0836c477b04a1
-
SHA256
ff72529bf3121912e0205ad2e313571d96d843b64b4547d34829ea2623600714
-
SHA512
62bc25e35bd7a9a294398fe88faca63510438ce428caa0ae695f22ce0682e0d0a327d3b8e5c6daae5e22a64b0923a3ac69a4493a8533dc0bac428e0aa6357ef4
-
SSDEEP
49152:VAA3INxQ7tqTvzUYeufB7kh4KA02oQyZXmib9f3jSVDiABGJqT5+GPg:VAA+gCzUYeufB7kh4KA0XQyZTfCWA
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ff72529bf3121912e0205ad2e313571d96d843b64b4547d34829ea2623600714.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE