Behavioral task
behavioral1
Sample
a0b86ba55e58f69d2b6475b87f4188ff32d9d7b0e6b040f4b490d64b99268af2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a0b86ba55e58f69d2b6475b87f4188ff32d9d7b0e6b040f4b490d64b99268af2.exe
Resource
win10v2004-20220901-en
General
-
Target
a0b86ba55e58f69d2b6475b87f4188ff32d9d7b0e6b040f4b490d64b99268af2
-
Size
136KB
-
MD5
0071573c4f66d7b1ce605fe194352156
-
SHA1
5dd5a4dff19d45dcf504eae73b48a63438543ec1
-
SHA256
a0b86ba55e58f69d2b6475b87f4188ff32d9d7b0e6b040f4b490d64b99268af2
-
SHA512
11130a6bfc503f4017af2af11fd1ff350cd46a19033685f5f426357063549ed953e5bdd52f711d71fa178fb00efaf29313ce3b0c0a1fda5c9ae195e3e41d6607
-
SSDEEP
3072:BPCUumUc6g7oWgsw/CjTimfWdVerSBuBnftu26:B6F0sCanRBuB
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
a0b86ba55e58f69d2b6475b87f4188ff32d9d7b0e6b040f4b490d64b99268af2.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE