Behavioral task
behavioral1
Sample
2bd047bdf64880bb2a8265d1fc7d298470fd66e45e24dce6efecba47667ab684.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2bd047bdf64880bb2a8265d1fc7d298470fd66e45e24dce6efecba47667ab684.exe
Resource
win10v2004-20220901-en
General
-
Target
2bd047bdf64880bb2a8265d1fc7d298470fd66e45e24dce6efecba47667ab684
-
Size
167KB
-
MD5
bedb8b1016ddec483cc4b86ed4a80fad
-
SHA1
8b79946c2ca61fa294c2394ec8133cd69de0f116
-
SHA256
2bd047bdf64880bb2a8265d1fc7d298470fd66e45e24dce6efecba47667ab684
-
SHA512
ae5a5fd9d142a16c6e586ef6721e5fff1e6d0cfcbbebdbe2787349bb4298e68da53e2c0509e47010829295bb67e68488da3ad2914868fe84203395bbf3ac711e
-
SSDEEP
3072:GqmJit1/a+sgmKB5pevAp58CzmJit1/a+sgmKB5pevAp58:gQd+ApcQd+Ap
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
2bd047bdf64880bb2a8265d1fc7d298470fd66e45e24dce6efecba47667ab684.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 21KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 9KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX0 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX1 Size: 23KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
m��A9 Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE