Behavioral task
behavioral1
Sample
189c8c0a2773a56490d85fc78b7360e9735ce05064c1fccd941896886671b72f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
189c8c0a2773a56490d85fc78b7360e9735ce05064c1fccd941896886671b72f.exe
Resource
win10v2004-20221111-en
General
-
Target
189c8c0a2773a56490d85fc78b7360e9735ce05064c1fccd941896886671b72f
-
Size
555KB
-
MD5
ea1492ebac24affc5d92e5d15d02183a
-
SHA1
9c48ec86491984db77d6de1705f1fc24d688d94b
-
SHA256
189c8c0a2773a56490d85fc78b7360e9735ce05064c1fccd941896886671b72f
-
SHA512
5594ab926c910a1480c0014a7fe8740b683840fd6ea03c563b6aaab44fe296ee4524884f853b035dc99ef91703837b1cbb0fac41935070425d425441044e6119
-
SSDEEP
12288:+gSeDztP5pKIsKa+q4iv68tnRqepnBq33X9Hy9xQdmYs44ShlBw:+gNzfwIi4B5YnBqHXxynOm9ilG
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
189c8c0a2773a56490d85fc78b7360e9735ce05064c1fccd941896886671b72f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xur Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE