Behavioral task
behavioral1
Sample
3b30644c0df9f9d9b83d6e7fc4d901126043ea34675dc1708364c89ca4420344.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3b30644c0df9f9d9b83d6e7fc4d901126043ea34675dc1708364c89ca4420344.exe
Resource
win10v2004-20220901-en
General
-
Target
3b30644c0df9f9d9b83d6e7fc4d901126043ea34675dc1708364c89ca4420344
-
Size
465KB
-
MD5
13e344d69e91045ed0dc924c72c30450
-
SHA1
ba291e7b79c5a5bafe066c9f8bcf02e4f332bd8a
-
SHA256
3b30644c0df9f9d9b83d6e7fc4d901126043ea34675dc1708364c89ca4420344
-
SHA512
a49e469c690df35f33571f9d72d9e87e7e52a9be378217bcca8fdb02ad9559ae4574d57b5c72ac7f7aee5dc509a532add480037d54cea398150d11b1e0ec9a19
-
SSDEEP
6144:fk4qm2g1mpndfpwF5jqMNS4h7CQMi44GX7yDDYLgjvSbjGOSnd6wbY7px5WkYE3N:s9//wXu17ZkDiYSbj0dFbacM0IPn
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
3b30644c0df9f9d9b83d6e7fc4d901126043ea34675dc1708364c89ca4420344.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 280KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE