Behavioral task
behavioral1
Sample
b4c05695f7d8cbcb03b1470c9103786deaf545be29a29a9d20e304814198f74c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b4c05695f7d8cbcb03b1470c9103786deaf545be29a29a9d20e304814198f74c.exe
Resource
win10v2004-20220901-en
General
-
Target
b4c05695f7d8cbcb03b1470c9103786deaf545be29a29a9d20e304814198f74c
-
Size
215KB
-
MD5
61644cb25a59e0e25cecf0d93fcc783a
-
SHA1
70e97e3c3966848706fd1c532f36ac9f3b016051
-
SHA256
b4c05695f7d8cbcb03b1470c9103786deaf545be29a29a9d20e304814198f74c
-
SHA512
e3dadc87b61216cf06c33071c47e59bf674fbf3dabd363c26ca23e6f91b6a0bdfeb25311e9da114b7fab1ea410937265c9fd319eb5413d514cceae5e47ee7199
-
SSDEEP
3072:v2HzvOOfwjdbsCOJHMhVDNY4WaNm5sPrGmKMReGRoutNr6+AU:veOOfkbsNBqtWaNm59oRoS4+Z
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b4c05695f7d8cbcb03b1470c9103786deaf545be29a29a9d20e304814198f74c.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 178KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE