Behavioral task
behavioral1
Sample
0bdf0bfa438b6c82069d261e64e7992c9964ae2ff8d3aecd74395df83401d406.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0bdf0bfa438b6c82069d261e64e7992c9964ae2ff8d3aecd74395df83401d406.exe
Resource
win10v2004-20220812-en
General
-
Target
0bdf0bfa438b6c82069d261e64e7992c9964ae2ff8d3aecd74395df83401d406
-
Size
717KB
-
MD5
193ddf43790e216c6a69f85394320abb
-
SHA1
04f2376f8cd9a1f21502643df7844567115e7673
-
SHA256
0bdf0bfa438b6c82069d261e64e7992c9964ae2ff8d3aecd74395df83401d406
-
SHA512
337fa0649a197f1710da68cd21e91423f6114892605fce244c5c07c51091107b14283a3306a10b031c13013776b59cc028dfc810418f5ddda0c635f9cad18f68
-
SSDEEP
12288:dzhWfj03hNPDTf6CQMpcK9P3J6RD4LOqGGA0FzmpsYvmzYuPy02U:G7ihNPSCQAcyvbybGjYHUy0V
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
0bdf0bfa438b6c82069d261e64e7992c9964ae2ff8d3aecd74395df83401d406.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE