Behavioral task
behavioral1
Sample
b6f71ac0dc991b3debcb9f6f3fbb2f99255af8dd777fd32e674f761d2da24023.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b6f71ac0dc991b3debcb9f6f3fbb2f99255af8dd777fd32e674f761d2da24023.exe
Resource
win10v2004-20220812-en
General
-
Target
b6f71ac0dc991b3debcb9f6f3fbb2f99255af8dd777fd32e674f761d2da24023
-
Size
289KB
-
MD5
67f4a370db5a14576710f0b62f1aac21
-
SHA1
cd796e24066662285485e39aecabcee16622ba8e
-
SHA256
b6f71ac0dc991b3debcb9f6f3fbb2f99255af8dd777fd32e674f761d2da24023
-
SHA512
70d1511b2683fc2efc0d933b4180c6d5dc8b2eefed90cd90a73f0b325c72b58561d0cdbd270aa6042f0b63920286e218bd907c40fcf7fb8f9d245260081dd46c
-
SSDEEP
6144:wECF0xTprSCbPj4yoAEfFq3nTkUc/1x4tU0BM09:XhSRyoAxTbEnI9
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b6f71ac0dc991b3debcb9f6f3fbb2f99255af8dd777fd32e674f761d2da24023.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 212KB - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE