Behavioral task
behavioral1
Sample
b6ab9184f0494643c5d46b3e35b3bc18478f5d4da9476e83030bccc5fca733ef.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b6ab9184f0494643c5d46b3e35b3bc18478f5d4da9476e83030bccc5fca733ef.exe
Resource
win10v2004-20221111-en
General
-
Target
b6ab9184f0494643c5d46b3e35b3bc18478f5d4da9476e83030bccc5fca733ef
-
Size
1.6MB
-
MD5
7d75e855715486b27e7a9cb6449fc587
-
SHA1
38e06119083ee00c7da4bf91edd2e3ca261b026a
-
SHA256
b6ab9184f0494643c5d46b3e35b3bc18478f5d4da9476e83030bccc5fca733ef
-
SHA512
ade68f78c02a2b54762406daca59ed1525285c2f81094a03ee0219b3b47576d7e3b393f3c0030c037b7dbcb63b1849f5e127a6e2755e03033b9fda070e446182
-
SSDEEP
49152:w4C3sEQDJZcMCWw/dh0IsHRPTC2PaV9XBZmdxUezm:w4C3sEQDjcMAh0ICRL3ypYduZ
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b6ab9184f0494643c5d46b3e35b3bc18478f5d4da9476e83030bccc5fca733ef.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 272KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 81KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe .js windows x86