Behavioral task
behavioral1
Sample
whenimechainthesuma.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
whenimechainthesuma.exe
Resource
win10v2004-20230220-en
General
-
Target
whenimechainthesuma.exe
-
Size
46KB
-
MD5
c2bcf2f778b046a127077ba1888b0f80
-
SHA1
dd4653c4867bcfac9baef707b9400943d5ac0509
-
SHA256
91b472d14339198fa88403167aefedd9d4365228317dd6f17b9fc3549c327681
-
SHA512
36013f253361416c9cfbfb8259bb9fbf2a780fb4706103465afe05c77e59aeb782555a77fa2a7186e8cf4e60e88ac74b48a9e26e72416323ea3c6e733f0f24c8
-
SSDEEP
768:7qEibbXpEFOFqHn6LIfncGvAQi1LuvP2QNANPaWBRskFqhTLM+1mjQ567yGVde/B:2EiBwAw/cGYQi1y2QNAx1FcLD12Qs7yv
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
whenimechainthesuma.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE