Behavioral task
behavioral1
Sample
bf2f05560414484ce79f71cf2a3d77e4aad57df4804b598bf99729280031a630.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bf2f05560414484ce79f71cf2a3d77e4aad57df4804b598bf99729280031a630.exe
Resource
win10v2004-20220812-en
General
-
Target
bf2f05560414484ce79f71cf2a3d77e4aad57df4804b598bf99729280031a630
-
Size
389KB
-
MD5
6fea312e5d03c63f09dd5b59708e8f01
-
SHA1
3375c281cb9fdb15aa46c1a0e1c42ab893e9d277
-
SHA256
bf2f05560414484ce79f71cf2a3d77e4aad57df4804b598bf99729280031a630
-
SHA512
168e99ee764e17d893f130ced6417071f5e3d228e17cbcb2d84e7b88784a8086f4463c5dba7464205c16b5bd7d8d5bf3c66a92c86f4cf619d830f2d7c7c56789
-
SSDEEP
6144:LcM5DWnN6aAW/2kXz20ckY+NIMZKHuWXC0QgihpWXfC7Ud+oceSsQLH5Aa9:QM5DSN6aAH0XNp7gGpWa7U8ovSsPa9
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
bf2f05560414484ce79f71cf2a3d77e4aad57df4804b598bf99729280031a630.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 424KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 193KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 195KB - Virtual size: 195KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE