Behavioral task
behavioral1
Sample
b27e9ee7be853880f8046877d7744a6f44f147f18546131a4f12432cc691e272.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b27e9ee7be853880f8046877d7744a6f44f147f18546131a4f12432cc691e272.exe
Resource
win10v2004-20220812-en
General
-
Target
b27e9ee7be853880f8046877d7744a6f44f147f18546131a4f12432cc691e272
-
Size
161KB
-
MD5
a28209e63da1d1c1278b95c7fcb01600
-
SHA1
50ad87adc46127a27c10cce654d97677bd0fc196
-
SHA256
b27e9ee7be853880f8046877d7744a6f44f147f18546131a4f12432cc691e272
-
SHA512
5f72905814cf2be4a8e8e31e40af97f0c5da8bb49db74bd3d91f64aa4d575633325349f43d2e684846ebee0c0a166dad7fa4490f1ae09312d61151dcacbcf2f4
-
SSDEEP
3072:yxTqpdA3f6QNf2IPO4DpmWpAsfYbTOBoefYi6a9k20tAvnkzkuI4B:02pdqfv2IPOGfXf5ovWvakw
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b27e9ee7be853880f8046877d7744a6f44f147f18546131a4f12432cc691e272.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE