Behavioral task
behavioral1
Sample
1bf5f32a4d500ccc035e2faaad3addd0d2c16371e50cdbe3e6945713bc5e9222.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1bf5f32a4d500ccc035e2faaad3addd0d2c16371e50cdbe3e6945713bc5e9222.exe
Resource
win10v2004-20220901-en
General
-
Target
1bf5f32a4d500ccc035e2faaad3addd0d2c16371e50cdbe3e6945713bc5e9222
-
Size
270KB
-
MD5
83cceeb762e87be9619f4140366df7ef
-
SHA1
2cdcc12823e851bc8a8efcff399bd121d48f31e8
-
SHA256
1bf5f32a4d500ccc035e2faaad3addd0d2c16371e50cdbe3e6945713bc5e9222
-
SHA512
fd175de806de781e568c43da240d0130ae156bf518c317c981ee5ff5031e24ff34e2b8a5b5134bb12f8c13ea48c4fe8d9b8e3fb5ccaee1374f05baba2365c077
-
SSDEEP
6144:kWfCbohHv6mC21AAf3os6SC+vyJ65FrD1yyIchVjz5GEKQVfjixoSO:tfuopvBCSfYdN6yE55D1yyIcVPqQVfjV
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
1bf5f32a4d500ccc035e2faaad3addd0d2c16371e50cdbe3e6945713bc5e9222.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 266KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE