Behavioral task
behavioral1
Sample
bb01247588f203f93399b6646e99795364319625c4721b08e5a6227d16b19fce.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bb01247588f203f93399b6646e99795364319625c4721b08e5a6227d16b19fce.exe
Resource
win10v2004-20220901-en
General
-
Target
bb01247588f203f93399b6646e99795364319625c4721b08e5a6227d16b19fce
-
Size
842KB
-
MD5
0d053d02f2d9244375fe56da34a71330
-
SHA1
81aa4db8c62942fd31cf8e124ff2934eea95e66a
-
SHA256
bb01247588f203f93399b6646e99795364319625c4721b08e5a6227d16b19fce
-
SHA512
cbd06a69c3a313075af1ab9191f4ba10f7ab69cf38b3908ca9f38400dc68d8510d5d18f85954695f8bc7db4fdd3a6ecb8a2483ed7ac8a786222dc1c156d57ab0
-
SSDEEP
12288:W84vnhUtnAWoRt3x+dk/Z2ETW6oS+BBjjPOMccUXXs2HFC2AOAuV4K:kW5GZx+8VTwHPFccAc2HFC2fAS
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
bb01247588f203f93399b6646e99795364319625c4721b08e5a6227d16b19fce.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 864KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 243KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 412KB - Virtual size: 412KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE