Behavioral task
behavioral1
Sample
18baa4f3b24ee044d774b329b13ddc699cf40564414447db34304ea6fb436f7c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
18baa4f3b24ee044d774b329b13ddc699cf40564414447db34304ea6fb436f7c.exe
Resource
win10v2004-20220812-en
General
-
Target
18baa4f3b24ee044d774b329b13ddc699cf40564414447db34304ea6fb436f7c
-
Size
16KB
-
MD5
b8662a2b8af3422a79b3a93edda65321
-
SHA1
f8fb4757d710fea5182c29c873904758538c2280
-
SHA256
18baa4f3b24ee044d774b329b13ddc699cf40564414447db34304ea6fb436f7c
-
SHA512
0089621699cb1420b10198ea2653f90718a0eb3bb9c4194912dba25fcc230481304ec3be4c8c4cd184e53b8662110642d3474f7a0c1a9c7067f518f97ecb0149
-
SSDEEP
192:YzK1L/NIwvmT0vX3ZSQ4FaNJhLkwcud2DH9VwGfctzK918uI:YG15IweT2ZYaNJawcudoD7UgEu
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
18baa4f3b24ee044d774b329b13ddc699cf40564414447db34304ea6fb436f7c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE