Behavioral task
behavioral1
Sample
349d8227b04a2ea770e4508acca09a52ac4d754edb8bd2f55105396ca2404b82.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
349d8227b04a2ea770e4508acca09a52ac4d754edb8bd2f55105396ca2404b82.exe
Resource
win10v2004-20221111-en
General
-
Target
349d8227b04a2ea770e4508acca09a52ac4d754edb8bd2f55105396ca2404b82
-
Size
780KB
-
MD5
899a9e920b4fdc39a27b9685d5565444
-
SHA1
ffcab701df8f423f5cc992ce5a1bd559c14e3222
-
SHA256
349d8227b04a2ea770e4508acca09a52ac4d754edb8bd2f55105396ca2404b82
-
SHA512
7e3fe13fe81547377dce248f2b40d7c9cc4fd3d72de40097c2685287bb49a8cbcc60ee037a7f9e80709387f07747a14b79549f217ff49716a05c4f1a9c9561b0
-
SSDEEP
12288:vcISeW3MjpRx7vCyzsrBRRWHHw6DQCfoTW/BXyzzKyGQeHiSQk4r58W68u+Rh+6/:vcicMjpiEr1gOEy9RCg4F8Whu+RrY
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
349d8227b04a2ea770e4508acca09a52ac4d754edb8bd2f55105396ca2404b82.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 735KB - Virtual size: 736KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE