Behavioral task
behavioral1
Sample
b4b9cb8a8c4e91f8ca0041a7a35edec41db7e4050732bb4832454efc8e35e751.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b4b9cb8a8c4e91f8ca0041a7a35edec41db7e4050732bb4832454efc8e35e751.exe
Resource
win10v2004-20220812-en
General
-
Target
b4b9cb8a8c4e91f8ca0041a7a35edec41db7e4050732bb4832454efc8e35e751
-
Size
687KB
-
MD5
800b491e4726a3aa39aea2a4345067b9
-
SHA1
1fb8076b6065aa1ac2a71692e6dcccb4e2bfc9d0
-
SHA256
b4b9cb8a8c4e91f8ca0041a7a35edec41db7e4050732bb4832454efc8e35e751
-
SHA512
2778f88c3f1729aca0021d15fadb2ea30ce4438bb86691f0166757656fcae6f590a36c8caaace504b0833ddc30013cf138ba1db850b8581c0865d3276630d5ab
-
SSDEEP
6144:GWZfec9EbXDk6RkQKunmy+g4VrG1VVE+I5E2Ernmy+g4yuHOSnmy+g4VrG1VVE+m:3ZWtI6RkwKuVrGOSKuVrw
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b4b9cb8a8c4e91f8ca0041a7a35edec41db7e4050732bb4832454efc8e35e751.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE