Behavioral task
behavioral1
Sample
367aa87a015069b13fe85c48a9ff0f6ab354bb0086796a40981d66c2cf6c76ae.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
367aa87a015069b13fe85c48a9ff0f6ab354bb0086796a40981d66c2cf6c76ae.exe
Resource
win10v2004-20230220-en
General
-
Target
367aa87a015069b13fe85c48a9ff0f6ab354bb0086796a40981d66c2cf6c76ae
-
Size
3.1MB
-
MD5
ff44217635b2358b9f4b7fc01144a4d3
-
SHA1
9214300586d3ac6d6cb94a0cc978e6362e0609e2
-
SHA256
367aa87a015069b13fe85c48a9ff0f6ab354bb0086796a40981d66c2cf6c76ae
-
SHA512
61a95c0c3b5663f83d82547029de6debc3695ed6a5d64c491c83e63cebc9bf02affa23103547c9f1e7cf37f32a4f564235759589c1698cceb673371b5cbe229b
-
SSDEEP
49152:tq4alebHexQHVMh4agG0fc7+9QdwUJNFsq/2VVb3RWrswGGnn4r4JU8Gpp4gsVG8:tCgHeW+qNG0OdwW12VZ3cC8LgAfd
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
367aa87a015069b13fe85c48a9ff0f6ab354bb0086796a40981d66c2cf6c76ae.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE