Behavioral task
behavioral1
Sample
bcfa06c5f0e4edc58e4aee1d7569195873a961d60566a3cc88bc2c7ade683530.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bcfa06c5f0e4edc58e4aee1d7569195873a961d60566a3cc88bc2c7ade683530.exe
Resource
win10v2004-20220812-en
General
-
Target
bcfa06c5f0e4edc58e4aee1d7569195873a961d60566a3cc88bc2c7ade683530
-
Size
178KB
-
MD5
424654277503abacfae3c1772c70c40f
-
SHA1
29e4ea017af339cfcb511084d4120af40ee9dfe4
-
SHA256
bcfa06c5f0e4edc58e4aee1d7569195873a961d60566a3cc88bc2c7ade683530
-
SHA512
a9f53bf6401375a6b9fe3e3ae3e0225a9990b8a7113e1e2a594e17e0c53ccf9859e4e6ab6a3a82bf72a0c1d57cf9af99c20ee739c493ba5cef3f9a2831728566
-
SSDEEP
3072:aDfYg7EJm87ZhHP/8JKSxepU+X+TU9Wck9Vzi1c144VinCIn7gE5uPl+7bLXHwDO:a7UmUZhv/3Sx14W3zME44ViH7HwmpG+X
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
bcfa06c5f0e4edc58e4aee1d7569195873a961d60566a3cc88bc2c7ade683530.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE