Behavioral task
behavioral1
Sample
af0a93c304eb7a1a528f41c62773203b58e7aed3b1be2e22f3ca795f2b3ca7c8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
af0a93c304eb7a1a528f41c62773203b58e7aed3b1be2e22f3ca795f2b3ca7c8.exe
Resource
win10v2004-20220812-en
General
-
Target
af0a93c304eb7a1a528f41c62773203b58e7aed3b1be2e22f3ca795f2b3ca7c8
-
Size
231KB
-
MD5
7c20bae764f94ddb42615e91a2117519
-
SHA1
8ec190b5143635772132d5db5a2abbfa4855e236
-
SHA256
af0a93c304eb7a1a528f41c62773203b58e7aed3b1be2e22f3ca795f2b3ca7c8
-
SHA512
c90d89561145b4b1126df1fd9d79ea1611df66874751ba0f1becfeec1b51a13040e9645e65454e921ac08b5191128c8e5491257930c91f36715c00a2e3cd33ef
-
SSDEEP
3072:7Us34eEoA6GhpX4FivXIjAUbahCP3rNS2M676jpY3amPtiE16jwCXg:QwEoAhX4svXXDQFMnIamZ
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
af0a93c304eb7a1a528f41c62773203b58e7aed3b1be2e22f3ca795f2b3ca7c8.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE