Behavioral task
behavioral1
Sample
b65aa876ae00856fdbd7b3f5e1b9d9423145a30a02201a783b4119ae0862c447.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b65aa876ae00856fdbd7b3f5e1b9d9423145a30a02201a783b4119ae0862c447.exe
Resource
win10v2004-20220812-en
General
-
Target
b65aa876ae00856fdbd7b3f5e1b9d9423145a30a02201a783b4119ae0862c447
-
Size
525KB
-
MD5
72093a919de901a44c7abf3ca95a55d0
-
SHA1
3dbc88329ed2712812060ebe8823017c928ff6f4
-
SHA256
b65aa876ae00856fdbd7b3f5e1b9d9423145a30a02201a783b4119ae0862c447
-
SHA512
6161017e1916078f821ceb50268f1bafa5f9d77c083f333027273b6b2ec33c4b6a87d9ff4ec972712f4755c02914a846506576f8790ce9d77ab64b082f24a6db
-
SSDEEP
12288:+hRwctdaumW9fkQngna8YMmlUbzDCFC2PQKoS2SsPdY:+h6cX/ZWa+nD0PQDSo6
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b65aa876ae00856fdbd7b3f5e1b9d9423145a30a02201a783b4119ae0862c447.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 477KB - Virtual size: 480KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE