Behavioral task
behavioral1
Sample
b31a60e7b030ba0281c1dfeffae4b577167dae4fa1563ff0763b518bf468bd7b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b31a60e7b030ba0281c1dfeffae4b577167dae4fa1563ff0763b518bf468bd7b.exe
Resource
win10v2004-20220901-en
General
-
Target
b31a60e7b030ba0281c1dfeffae4b577167dae4fa1563ff0763b518bf468bd7b
-
Size
298KB
-
MD5
82efa4e87065c2cb1fcc539d33973f10
-
SHA1
900380d17efd8385490e3a399843f3c9f2fef1a6
-
SHA256
b31a60e7b030ba0281c1dfeffae4b577167dae4fa1563ff0763b518bf468bd7b
-
SHA512
90527d305579aff403a892f11920b5945a08a8ee0358d1ed36cf1a7802985f9c71768b6d41bc65cb06bae95f627dd5b6ed71550047f207ca028e9d4e42f34bb6
-
SSDEEP
6144:YXYyEPye52fu0zK9gf4CwteyPc5wuxop0LRgRTTx/:YXYy+m3z1wCwtKVWKOxR
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b31a60e7b030ba0281c1dfeffae4b577167dae4fa1563ff0763b518bf468bd7b.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 576KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 283KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE