Behavioral task
behavioral1
Sample
feb702c7049377268d720baa31496682895e9d18e8fa2566e9a7353321439a45.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
feb702c7049377268d720baa31496682895e9d18e8fa2566e9a7353321439a45.exe
Resource
win10v2004-20221111-en
General
-
Target
feb702c7049377268d720baa31496682895e9d18e8fa2566e9a7353321439a45
-
Size
1.2MB
-
MD5
7902316cf7b66aeaa0a40d22a6bb146b
-
SHA1
8839cc3c9b8aaff27a21ed079df4dfe7d8a0b79e
-
SHA256
feb702c7049377268d720baa31496682895e9d18e8fa2566e9a7353321439a45
-
SHA512
a87f35faa38550952097cfb0ab182df1e68cabd0d58d884e7692990029e22757e1444c09a756212a65ba4d2e07eeb9d9be0d3bb2b7da47f80f8ff56a78e526a1
-
SSDEEP
12288:CGNoSV7kgQY9KDUhLEc1ENjE7yLfRoPma6E5oHKLbdQlQbk9qw+oBR7Z53:CKbVBb9koEc+A7SkxYKLby99NH7f
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
feb702c7049377268d720baa31496682895e9d18e8fa2566e9a7353321439a45.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 664KB - Virtual size: 664KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 505KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE