Behavioral task
behavioral1
Sample
b00e9946ffdeb3d7e9e5f33c38b9ce6dedd914d64768669da946147918c12359.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b00e9946ffdeb3d7e9e5f33c38b9ce6dedd914d64768669da946147918c12359.exe
Resource
win10v2004-20221111-en
General
-
Target
b00e9946ffdeb3d7e9e5f33c38b9ce6dedd914d64768669da946147918c12359
-
Size
657KB
-
MD5
0653ef926ac94f0e9ec38036c6d4582e
-
SHA1
4c2fd068344997fd2fdaa01402a59499cb8ccc65
-
SHA256
b00e9946ffdeb3d7e9e5f33c38b9ce6dedd914d64768669da946147918c12359
-
SHA512
eacda246e5fd62537e7cddf8b1f3c24f20e1dfc29493e516cd27fa3c1b5c129b35067e8f99acc4ca1db200fc1bc92a3b511b89a201af8d2c2976aa5eb312a410
-
SSDEEP
12288:pUQcLonYsMmWy/vGo9PiPSZna2X3E1xzdM1sjvVRA0n6IBP0W7qe:XcLozMmWbuiQavzzdMijd7n6IFP7q
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b00e9946ffdeb3d7e9e5f33c38b9ce6dedd914d64768669da946147918c12359.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 654KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe .vbs windows x86