Static task
static1
Behavioral task
behavioral1
Sample
bbd8d78a0c241948acda56a12e92efcbeaff2b89443c33135113ccd508e646bd.exe
Resource
win7-20220311-en
General
-
Target
bbd8d78a0c241948acda56a12e92efcbeaff2b89443c33135113ccd508e646bd
-
Size
234KB
-
MD5
f36c144d3572825d5a4bbe01fc6b2e5f
-
SHA1
13c0276832e96446fc927cf77b057194a7326cc6
-
SHA256
bbd8d78a0c241948acda56a12e92efcbeaff2b89443c33135113ccd508e646bd
-
SHA512
666346ee29abf0caa8314226c421a2ca358d8239ecc59c8e7b5ebe8fdeb2ccb0fab39f528c5bd0042d47dfcf2061e99c36363b10ef905e48f4ad129574ca7181
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx
Files
-
bbd8d78a0c241948acda56a12e92efcbeaff2b89443c33135113ccd508e646bd.exe windows x86
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_SYSTEM
Sections
UPX0 Size: - Virtual size: 77.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 222KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE