Behavioral task
behavioral1
Sample
ab53daa0391041bc135e27d27a56fbddc169e8494991af1de6f7e5f569103cdb.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ab53daa0391041bc135e27d27a56fbddc169e8494991af1de6f7e5f569103cdb.exe
Resource
win10v2004-20220812-en
General
-
Target
ab53daa0391041bc135e27d27a56fbddc169e8494991af1de6f7e5f569103cdb
-
Size
179KB
-
MD5
53e064a3ddd540efa51ab60b80d3e47d
-
SHA1
8c50a856d9740fdc676cc0789ff619559eeb86d1
-
SHA256
ab53daa0391041bc135e27d27a56fbddc169e8494991af1de6f7e5f569103cdb
-
SHA512
8186f893773b331287c7fff509511882c19748358ca93d55888f8b2dfd18a751eb5d0870aeeb90e5b25d15b1781b997a4a4a19606377c5ac40f08016c8de1cbe
-
SSDEEP
3072:dB829B5TpDnq2gKkbb+NjI0s8cCecLG2VPjNXx+ak2rFRosLTYIxhka2Fb:dN9le2gKGitb3XUvULTxo9
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ab53daa0391041bc135e27d27a56fbddc169e8494991af1de6f7e5f569103cdb.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 304KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 171KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE