Behavioral task
behavioral1
Sample
bbe6112da5728b9706ae33f9a8cbbe83a807d6b93e14ae311f4aa640311e09ee.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bbe6112da5728b9706ae33f9a8cbbe83a807d6b93e14ae311f4aa640311e09ee.exe
Resource
win10v2004-20220812-en
General
-
Target
bbe6112da5728b9706ae33f9a8cbbe83a807d6b93e14ae311f4aa640311e09ee
-
Size
50KB
-
MD5
a2acc6e88383f3cf1cfd5eab330f9e75
-
SHA1
2263f03e6953c639d5a88064ab77f365aac0ac03
-
SHA256
bbe6112da5728b9706ae33f9a8cbbe83a807d6b93e14ae311f4aa640311e09ee
-
SHA512
cf460dc6170f7fb5059f2025fee7894d249117e18f21d10a828b46877573030cf755a14cb1de067f8d15e8f81c2ede960ef416250fe835432810901ddf3e5beb
-
SSDEEP
768:ux85FlXD22AQCHQB+z7aFvTjJq5HeuTZssGwn/suu:RZ9iH++z7aPJqsuTZOuu
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
bbe6112da5728b9706ae33f9a8cbbe83a807d6b93e14ae311f4aa640311e09ee.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE