Behavioral task
behavioral1
Sample
3b29357aea330d8fe9ae51b0de99bbc720a41bd1352939c94d3210717cc773ef.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3b29357aea330d8fe9ae51b0de99bbc720a41bd1352939c94d3210717cc773ef.exe
Resource
win10v2004-20220812-en
General
-
Target
3b29357aea330d8fe9ae51b0de99bbc720a41bd1352939c94d3210717cc773ef
-
Size
2.6MB
-
MD5
a634838eee605bad143cff788db6607e
-
SHA1
fd3acabb93e6ff339b469a7cd3bff66ee3216a86
-
SHA256
3b29357aea330d8fe9ae51b0de99bbc720a41bd1352939c94d3210717cc773ef
-
SHA512
54f4c70197189a6a6d0344a5bba33806f39a727c439d9c21e86d4155b25a4a91e320eb1c9e86b3f65b2e299c2d5e2dd3165e09e764a8d83ebf601e66d8d6792d
-
SSDEEP
49152:fxcgPF6HVvMa5kdAbv/jFiiZsnr1oA5sBS69mwat+iLx9HjUwM1F6h:fxcgN6N5zXjFnsnOcsTTiDgFG
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
3b29357aea330d8fe9ae51b0de99bbc720a41bd1352939c94d3210717cc773ef.exe windows x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE