Behavioral task
behavioral1
Sample
6bdea59e17d1889aab9388a657aae51dc96d16616507c7b21dbc3f54211f92b7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6bdea59e17d1889aab9388a657aae51dc96d16616507c7b21dbc3f54211f92b7.exe
Resource
win10v2004-20220901-en
General
-
Target
6bdea59e17d1889aab9388a657aae51dc96d16616507c7b21dbc3f54211f92b7
-
Size
77KB
-
MD5
67b9fed1551fd074f687472db29b7286
-
SHA1
4f925792ee3453964126e219306adaaa16c0c2d7
-
SHA256
6bdea59e17d1889aab9388a657aae51dc96d16616507c7b21dbc3f54211f92b7
-
SHA512
5f6294e85ac255aacb03cb9f4ac7e8658b4ebacc5791a7f175f163417dc2470b80b7b80b2a1aa1fc280b143a80bc566cf4fcbad9c9b3dc5d2013e461e05dc677
-
SSDEEP
1536:P48aWmrsy8rcINQGTWZ72+ufgkyWaSdc0CeagOk44sf4VN:QWmLINQGA2fzaSd1Ceaz74247
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
6bdea59e17d1889aab9388a657aae51dc96d16616507c7b21dbc3f54211f92b7.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE