Behavioral task
behavioral1
Sample
caf28f1f1e236904b36fc584459d670a6ce4a1f78a07312e40ec6ce8d139d1e1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
caf28f1f1e236904b36fc584459d670a6ce4a1f78a07312e40ec6ce8d139d1e1.exe
Resource
win10v2004-20221111-en
General
-
Target
caf28f1f1e236904b36fc584459d670a6ce4a1f78a07312e40ec6ce8d139d1e1
-
Size
257KB
-
MD5
04ff8c033884e2cd795059c288d5aaa5
-
SHA1
0cc6b07e1188073f596a52b922b6e87fcc273572
-
SHA256
caf28f1f1e236904b36fc584459d670a6ce4a1f78a07312e40ec6ce8d139d1e1
-
SHA512
c708666d372533f71663e05d62731bbf823aaa051d29ecb559623c92b0a717941c8790fb0eb1052eabf59218094ff68f1f5c28ab83e64ba81159cb831120b5d3
-
SSDEEP
6144:iJjs0RyTYNKaAqbMCoyfSKT8Fs5BPryBQc9ldMCTPSVW6O:iJw0RyUKju/7fSDFOryGuldMiS
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
caf28f1f1e236904b36fc584459d670a6ce4a1f78a07312e40ec6ce8d139d1e1.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 420KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 250KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE