Behavioral task
behavioral1
Sample
2b48e649d290963ceda83c52655fc7d97353db7c4e031728519a01fb7c00e509.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2b48e649d290963ceda83c52655fc7d97353db7c4e031728519a01fb7c00e509.exe
Resource
win10v2004-20220812-en
General
-
Target
2b48e649d290963ceda83c52655fc7d97353db7c4e031728519a01fb7c00e509
-
Size
446KB
-
MD5
63082f426a8b098212b97b411f2144d0
-
SHA1
005233316cf7087fa9a7dc10fa7c6c8d8f9b7365
-
SHA256
2b48e649d290963ceda83c52655fc7d97353db7c4e031728519a01fb7c00e509
-
SHA512
f27f661b1ec33c8dd3dd7cbc994851bad205a14893e8953eeaa5ff063a2fe379c73fa6f1fb39b41f2bf2a5dd9db9e65874f3c70cf96ff2f6601bdc672f49372d
-
SSDEEP
12288:OCIswQKL0lZznV2r10xTh7Dlze4Go9SrWrl71O2oSyXB:OCIsCYlR8hIT+4GD82xR
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
2b48e649d290963ceda83c52655fc7d97353db7c4e031728519a01fb7c00e509.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 460KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 412KB - Virtual size: 412KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE