Behavioral task
behavioral1
Sample
7ab794bddc26ea5934d4933164d1543d2c4efce5c5a8095396555df3b9912f02.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7ab794bddc26ea5934d4933164d1543d2c4efce5c5a8095396555df3b9912f02.exe
Resource
win10v2004-20220812-en
General
-
Target
7ab794bddc26ea5934d4933164d1543d2c4efce5c5a8095396555df3b9912f02
-
Size
110KB
-
MD5
7905d195eefe977d45bac04b952e5232
-
SHA1
00e43d02cfca77c1ac5bf3861f3426abb1877120
-
SHA256
7ab794bddc26ea5934d4933164d1543d2c4efce5c5a8095396555df3b9912f02
-
SHA512
c0660c92d33ae9fca33f6bfaf2ff03531432ccb25efaf7351893910f776f31fd50476f6f0a94baeaace2b44a0d35bdc3a779d53ab998d9c3ae0f4ff84ef46629
-
SSDEEP
1536:yEBguwGA51GPzhvI6VQv1dHk0KGgerrVSkE5zMrXk6Ntt9iZ0IX:y+gn5KzuzdjKGBrEF5KVABX
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
7ab794bddc26ea5934d4933164d1543d2c4efce5c5a8095396555df3b9912f02.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 77KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lemybcc Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE