Behavioral task
behavioral1
Sample
0b050a9d70b645c77c52e3d304f78b367e643b27efeea33464e4c84b2de9d5a6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0b050a9d70b645c77c52e3d304f78b367e643b27efeea33464e4c84b2de9d5a6.exe
Resource
win10v2004-20220812-en
General
-
Target
0b050a9d70b645c77c52e3d304f78b367e643b27efeea33464e4c84b2de9d5a6
-
Size
234KB
-
MD5
67556eb987b075f2aa01a2736059af9e
-
SHA1
03c86a63c85153209d956fb647ec39d16d42b2ed
-
SHA256
0b050a9d70b645c77c52e3d304f78b367e643b27efeea33464e4c84b2de9d5a6
-
SHA512
8a6606140e19f1791450b062ec15e771b7aae8058bf21bcf325d7c20f8114c0d343aad4ebe0846d6a03f687ccfb3b0ac192e36d907e6d6ee1a311f6a9cddfa78
-
SSDEEP
6144:2xV8dI3bxRETtXaz/OJepymej5viyT5O/q9DUGEyoSX:2n8dI3b7ETtKKepymejF5aeDUGNoSX
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
0b050a9d70b645c77c52e3d304f78b367e643b27efeea33464e4c84b2de9d5a6.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 652KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 225KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE