Behavioral task
behavioral1
Sample
b0e49f6f2059bf9c3a83c4e9a1ec19594f4628f0590bfe3918507d699b5f3e40.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b0e49f6f2059bf9c3a83c4e9a1ec19594f4628f0590bfe3918507d699b5f3e40.exe
Resource
win10v2004-20220901-en
General
-
Target
b0e49f6f2059bf9c3a83c4e9a1ec19594f4628f0590bfe3918507d699b5f3e40
-
Size
249KB
-
MD5
0164233c4ea47c8c9ea071bdff6bd950
-
SHA1
5fbc24aaa34245098e93477e8961ef9b70b5178b
-
SHA256
b0e49f6f2059bf9c3a83c4e9a1ec19594f4628f0590bfe3918507d699b5f3e40
-
SHA512
cd2ff75c8fb5210a14040f66f04fded77f9ddd718559409239fc1a6e616a462c9538413130ccf33c208dc333af06a900200359e804132cde118933dc9c51f990
-
SSDEEP
6144:D2j6KlenuKQlv7oTvLcCYLSMIgPgZHHL8tSp4oFToSoe:x7nuLKTwC+IXZH6Sp4CToSn
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b0e49f6f2059bf9c3a83c4e9a1ec19594f4628f0590bfe3918507d699b5f3e40.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 246KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE