Behavioral task
behavioral1
Sample
cf56406b9373a515f8c007b208cac3dfd4e4b92dd2d9a2b41827576dbc781bdf.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cf56406b9373a515f8c007b208cac3dfd4e4b92dd2d9a2b41827576dbc781bdf.exe
Resource
win10v2004-20220812-en
General
-
Target
cf56406b9373a515f8c007b208cac3dfd4e4b92dd2d9a2b41827576dbc781bdf
-
Size
329KB
-
MD5
aa7a09fbc34828d7281119018be4acd7
-
SHA1
fa841b3d230f53a54f1d3f4e971b8ef438fb3eaf
-
SHA256
cf56406b9373a515f8c007b208cac3dfd4e4b92dd2d9a2b41827576dbc781bdf
-
SHA512
bd8ab88c6ad560c2b407dced86743c329cd1cb3ae7b08ab27be516e381f46606ff9ae4d39514c7b28dc4f12a57f1feeffb2dc054e8f86dd407c5cbcf553d9a92
-
SSDEEP
6144:RLypW3NXECMquO9ofW0fC0zmMwbddbBkc:AQpaBmMwbWc
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
cf56406b9373a515f8c007b208cac3dfd4e4b92dd2d9a2b41827576dbc781bdf.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE