Behavioral task
behavioral1
Sample
2ba12abc818125eace5e105de2493491ecac91ef2bb5725c576a1ec618bcd98c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2ba12abc818125eace5e105de2493491ecac91ef2bb5725c576a1ec618bcd98c.exe
Resource
win10v2004-20221111-en
General
-
Target
2ba12abc818125eace5e105de2493491ecac91ef2bb5725c576a1ec618bcd98c
-
Size
363KB
-
MD5
ae2862804dfa60206081a5d21b0d785e
-
SHA1
fe9ed13137b38a7a059e532e210390e24280df9a
-
SHA256
2ba12abc818125eace5e105de2493491ecac91ef2bb5725c576a1ec618bcd98c
-
SHA512
0762569917e6b7dbfa7289e1b73ec8053c51acadec201811a724f14db1dedcdf2d9c4cc7257dba5de5831d3f6a63f3935f46a46f16f19eeff6f8c2138ebcb88f
-
SSDEEP
6144:eeMPMBiHVMNAs80w/uhHwQ7WrX7WLR3sSlroqedZn0Wo:UMBaVMN5/fl7WrX7o5Roqg8
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
2ba12abc818125eace5e105de2493491ecac91ef2bb5725c576a1ec618bcd98c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 484KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 211KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 151KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe .js windows x86