Behavioral task
behavioral1
Sample
b6215c40ff88c160e8da1fc8cac5dc3e737443f4b3ca14d62e7a479d0cdf9ac7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b6215c40ff88c160e8da1fc8cac5dc3e737443f4b3ca14d62e7a479d0cdf9ac7.exe
Resource
win10v2004-20220812-en
General
-
Target
b6215c40ff88c160e8da1fc8cac5dc3e737443f4b3ca14d62e7a479d0cdf9ac7
-
Size
786KB
-
MD5
6bd8bc8b981c53cd9c56c6e87335d1d5
-
SHA1
a158905cfcabd7f5d90ad8e72bbdc1013a7da3d3
-
SHA256
b6215c40ff88c160e8da1fc8cac5dc3e737443f4b3ca14d62e7a479d0cdf9ac7
-
SHA512
1f69a10352a36fe9fc1bc6c522bc6d1d4ac64e083d6c0fed943c00ff4f63a7f349f3667e562c3ab297c37cd426399a3de814de0dd4b1b0d989fa58f3f2b3ac77
-
SSDEEP
24576:zbMo6NPOUw2uaCBBw0gKaq+zIzGoY+MD3/QpZJ2d:zbMo6N2r2unBB4I+zIzMD3/QbJ2
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b6215c40ff88c160e8da1fc8cac5dc3e737443f4b3ca14d62e7a479d0cdf9ac7.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 781KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE