Behavioral task
behavioral1
Sample
af608802332471257337f5b14e206c63cd43ca252a47373c55a576bb3a01e97f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
af608802332471257337f5b14e206c63cd43ca252a47373c55a576bb3a01e97f.exe
Resource
win10v2004-20221111-en
General
-
Target
af608802332471257337f5b14e206c63cd43ca252a47373c55a576bb3a01e97f
-
Size
198KB
-
MD5
764f67a82b62eb4df349d522d3f1fb98
-
SHA1
56024699dc0c33e209d4addfbe3d402908d06ded
-
SHA256
af608802332471257337f5b14e206c63cd43ca252a47373c55a576bb3a01e97f
-
SHA512
b3b9858ba9e684f70e8f127a86736aa0248cedae4143c729e90c1513c696017ff4aab5f18308768f0f2ab7669b7777ffb93103e5a6631a2ec08f932afb022d4f
-
SSDEEP
6144:0GQAwiPVKyeF5qAOEd/FCCXFpMFilANIT:p9eFrgtFxNk
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
af608802332471257337f5b14e206c63cd43ca252a47373c55a576bb3a01e97f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE