Behavioral task
behavioral1
Sample
b98153e6ca8efc5264c67534b6ebf516ef6b5de8815a0936b761c45c60b9f693.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b98153e6ca8efc5264c67534b6ebf516ef6b5de8815a0936b761c45c60b9f693.exe
Resource
win10v2004-20220812-en
General
-
Target
b98153e6ca8efc5264c67534b6ebf516ef6b5de8815a0936b761c45c60b9f693
-
Size
926KB
-
MD5
ac856082faaca7d501634910a7d20601
-
SHA1
7893f2418e1b87a4145ecbd8328351466e0a5902
-
SHA256
b98153e6ca8efc5264c67534b6ebf516ef6b5de8815a0936b761c45c60b9f693
-
SHA512
7ee4f82e52a8ed1c5253c1cb118043556295289b2024608874de190987c553709d4a74bea435d987f9b2212eb48b1ae059cbe525a0809c29472cab2a45238ae6
-
SSDEEP
12288:obvnf8UaJEjEKUBKuJyECjDW76LS/Uc7xX0gmbKgPdr/ud78Fpo/DyhxXpCLhOSc:ovoTKUsEyEyK+LS3g9G8A/wfXYHPYh
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b98153e6ca8efc5264c67534b6ebf516ef6b5de8815a0936b761c45c60b9f693.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 804KB - Virtual size: 808KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dvect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jwoiu Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oxxou Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ewjuv Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jdtbv Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ulfhw Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
snpnw Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ouctx Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lwlba Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
acvga Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE