Behavioral task
behavioral1
Sample
d6849409fc8d937eb6dc5775cc64dd5c731f418173756806c0dda677e56d9fc5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d6849409fc8d937eb6dc5775cc64dd5c731f418173756806c0dda677e56d9fc5.exe
Resource
win10v2004-20221111-en
General
-
Target
d6849409fc8d937eb6dc5775cc64dd5c731f418173756806c0dda677e56d9fc5
-
Size
126KB
-
MD5
edd62f9108e07e682808dec06acfcaa5
-
SHA1
5ee9f35552dc64fb8691e4eb2623571482626cac
-
SHA256
d6849409fc8d937eb6dc5775cc64dd5c731f418173756806c0dda677e56d9fc5
-
SHA512
ee92ea7257f2178a99d1f5190278421321694447320960c6d41b5f3a67d94fa0ac8d2b71f4b694a4d48a1bbc18bd277fb7941e1d96e223e08a5077fd25fdf587
-
SSDEEP
1536:sqWRMIjhFBxG33csHbimhl4Tqo1mxK3Wd8pgwOakGGWR6vyKOZUgHjrZMwQgUEkI:sqmMws7dhIFmd80jpyKIHjXFUEkI
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
d6849409fc8d937eb6dc5775cc64dd5c731f418173756806c0dda677e56d9fc5.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE