Behavioral task
behavioral1
Sample
bdfd2fd65af8430f0c955968621460af1fa30812c99c6d61cb20600add764df2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bdfd2fd65af8430f0c955968621460af1fa30812c99c6d61cb20600add764df2.exe
Resource
win10v2004-20220812-en
General
-
Target
bdfd2fd65af8430f0c955968621460af1fa30812c99c6d61cb20600add764df2
-
Size
252KB
-
MD5
0da860ce379bca5ead53763580ea7547
-
SHA1
41fd23b75d369da13713113f3ecc35bd850a9454
-
SHA256
bdfd2fd65af8430f0c955968621460af1fa30812c99c6d61cb20600add764df2
-
SHA512
9367a317ab92f6e3de10c7ebb6a178e358815c556860887ac81800a924ad114f40fe8e27daa4d292c113442c090b00af6bcca97f9b74b73d5699821447d0ee8f
-
SSDEEP
6144:AULgmP1Gl2LQYJYoSpBRa0YDos7ps4z9cbnBDX1aCoKJ:AUJPQl20YyoSp7a0t47BmnBDGq
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
bdfd2fd65af8430f0c955968621460af1fa30812c99c6d61cb20600add764df2.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qnk Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE