Behavioral task
behavioral1
Sample
tmpaaiczzfe.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
tmpaaiczzfe.exe
Resource
win10v2004-20230220-en
General
-
Target
tmpaaiczzfe
-
Size
37KB
-
MD5
b61f420fbf37cc18ac5668bf183d57c6
-
SHA1
2a017a1d53f1fa3aa52e4311b568904f6281c4ec
-
SHA256
da7e3ec3246fde5e42f11dd557cf23af84460b5e6048f84e5db35a15c899fb2c
-
SHA512
ec06b07744949b96c77b1ef0a0bcf073f47267607584b9f48bb01c06b57beed8eadb19c30fe8c070836b5016254f6ea4c9ecf7162ffc79eb7a6cd7a11a91c794
-
SSDEEP
768:DgiLPoEVUn+ajptzLxKCea4o5GmbCuDhtxeculFsYR:/LPoEVU+a1tMCerofhtQBDsy
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
tmpaaiczzfe.exe windows x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE