Behavioral task
behavioral1
Sample
a85164b17f6aa6f4352abedcc8af26adc5d17a19c14537631ffedb3d81adf3ff.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a85164b17f6aa6f4352abedcc8af26adc5d17a19c14537631ffedb3d81adf3ff.exe
Resource
win10v2004-20221111-en
General
-
Target
a85164b17f6aa6f4352abedcc8af26adc5d17a19c14537631ffedb3d81adf3ff
-
Size
471KB
-
MD5
06e30cdb3f99c213149a4cb2e53a4771
-
SHA1
3264cbe807da40e4fd91a8a12df7aa96bdf65d98
-
SHA256
a85164b17f6aa6f4352abedcc8af26adc5d17a19c14537631ffedb3d81adf3ff
-
SHA512
5a5f781ad0779c3e3d7183fa448ee7b6b699c13fbd1de4b7bb8288c7d3bd9d9619554cf17afb8d79bf6d0c60d18e197165adc6d7527f52f015fb760645180ee2
-
SSDEEP
12288:vGsMqp+8CRWpkIZBEbUIB83Ctcz+WVKy7oveR:1Mn8CqZKb983VzJVFge
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
a85164b17f6aa6f4352abedcc8af26adc5d17a19c14537631ffedb3d81adf3ff.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 179KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE