Behavioral task
behavioral1
Sample
bab7da42119edbe37bd659c495b0a0fc05ed51f9ded3e03f77fb0ee66056bc0b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bab7da42119edbe37bd659c495b0a0fc05ed51f9ded3e03f77fb0ee66056bc0b.exe
Resource
win10v2004-20220901-en
General
-
Target
bab7da42119edbe37bd659c495b0a0fc05ed51f9ded3e03f77fb0ee66056bc0b
-
Size
544KB
-
MD5
358e3bf717be47989b5d67052de0f591
-
SHA1
d976e59e26b474170e40ae2e5779dbc214b7804f
-
SHA256
bab7da42119edbe37bd659c495b0a0fc05ed51f9ded3e03f77fb0ee66056bc0b
-
SHA512
5ded2538dca59a10e80b0bc0b0fd027e1f46f3d79f9f03a21f38b64bbabb723fb94acd17f4b4d5fe4aae60f4c28e7c38c5c5fe88313002b945e653d24a008db5
-
SSDEEP
12288:Yqn7Siw/iOe1YLCPOsm/PWUliPKneki4Ur3g+gSoxvZ/qf7Rex:97S36OVLCJWPlliPJv/3g+gSQZoQx
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
bab7da42119edbe37bd659c495b0a0fc05ed51f9ded3e03f77fb0ee66056bc0b.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 748KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 419KB - Virtual size: 420KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 123KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE