Behavioral task
behavioral1
Sample
6b1c9d92b92009c43dd0025a6d917563c420a1ce1685acb2e03d183a30910363.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6b1c9d92b92009c43dd0025a6d917563c420a1ce1685acb2e03d183a30910363.exe
Resource
win10v2004-20220901-en
General
-
Target
6b1c9d92b92009c43dd0025a6d917563c420a1ce1685acb2e03d183a30910363
-
Size
31KB
-
MD5
f62af28c781faeb3544d4e306892e171
-
SHA1
a2496095b3ac01ce4f7221e244bd3b75462376f7
-
SHA256
6b1c9d92b92009c43dd0025a6d917563c420a1ce1685acb2e03d183a30910363
-
SHA512
edd56465878396c2b6c3154db6b17b2ee4afbc3e9d92f46387690a82b96e7991cfaa7468f727326a6b720ed73fe927c325fb50e1ebaacd4bfa344d90a403f8ce
-
SSDEEP
768:kDWngELqMfNNNK6XD3uM8VtJ1+xarcO2xF1uTNjwyH:WWnBqMfNLK6XD3uM2QxCCuuyH
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
6b1c9d92b92009c43dd0025a6d917563c420a1ce1685acb2e03d183a30910363.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
F��{ Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ