Behavioral task
behavioral1
Sample
ba69bc1e756dd66060367291a1335477b26be107a5ce3fdcf29524594717fc95.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ba69bc1e756dd66060367291a1335477b26be107a5ce3fdcf29524594717fc95.exe
Resource
win10v2004-20220812-en
General
-
Target
ba69bc1e756dd66060367291a1335477b26be107a5ce3fdcf29524594717fc95
-
Size
270KB
-
MD5
6b29794ef9280a694939d39b20cba678
-
SHA1
41f97c01d5834cf7a4fd8d462cca3505590d60be
-
SHA256
ba69bc1e756dd66060367291a1335477b26be107a5ce3fdcf29524594717fc95
-
SHA512
4e5cd9b2f4a8a729ed34339502ba21f3ea25a85e34485ef6b785b49b2886222d7c83141f2e31a1a4f5b11547b3d12bb002036916ef86459a56c1eeeb4ec6d4e7
-
SSDEEP
6144:kWfCbohHv6mC21AAf3os6SC+vyJ65FrD1yyIchVjz5GEKQVfjixoS5:tfuopvBCSfYdN6yE55D1yyIcVPqQVfjE
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ba69bc1e756dd66060367291a1335477b26be107a5ce3fdcf29524594717fc95.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 266KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE