Behavioral task
behavioral1
Sample
2b787d72ac60577f066dcac5e52f669ced831e08a23b849e70ef8b7738bb42b1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2b787d72ac60577f066dcac5e52f669ced831e08a23b849e70ef8b7738bb42b1.exe
Resource
win10v2004-20220812-en
General
-
Target
2b787d72ac60577f066dcac5e52f669ced831e08a23b849e70ef8b7738bb42b1
-
Size
289KB
-
MD5
615a99622e02fbf1f4b16ffbfda50540
-
SHA1
970b7b2ab51e4663904f38457cbfe5c5cf22c850
-
SHA256
2b787d72ac60577f066dcac5e52f669ced831e08a23b849e70ef8b7738bb42b1
-
SHA512
525fcb609eba700d6eb5a83e719217473a5f738a96c965cc0b7115c105df21095ab1768590ba449fd14fd455644fa801d9cd7037f4856294b1376f915364978d
-
SSDEEP
3072:OicL0cRBsQB80PFvWOgoHi2PxayGYF/LwrZCuhw4oSkrZ:DcLjsQf5goCCSVRwfvrZ
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
2b787d72ac60577f066dcac5e52f669ced831e08a23b849e70ef8b7738bb42b1.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE