Behavioral task
behavioral1
Sample
b23c78fe1444641733719807742d6a273ffcb2b226e8960b84282f361589a6bb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b23c78fe1444641733719807742d6a273ffcb2b226e8960b84282f361589a6bb.exe
Resource
win10v2004-20221111-en
General
-
Target
b23c78fe1444641733719807742d6a273ffcb2b226e8960b84282f361589a6bb
-
Size
859KB
-
MD5
1865942e9c0e84b9c76d270d6f319e90
-
SHA1
1ee4fa6d07a7df3761de7ebf3c673b2e23a5e1e6
-
SHA256
b23c78fe1444641733719807742d6a273ffcb2b226e8960b84282f361589a6bb
-
SHA512
e6447ea202e4549bdef17e40bbcbf367931b8b2a837ad251fad606eae3a43c44b109b321e68d6ff336cd3d21eda0b21a6317903050fc66eaad9226c890e6bdbf
-
SSDEEP
6144:QGzRxSVtp0l6whGfsKR+zkBpTaa5tJH7cHANUTNhGXcBnJl3//s:jt0VPFfsKAkrbPl7cHANUTNhGM2
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b23c78fe1444641733719807742d6a273ffcb2b226e8960b84282f361589a6bb.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 796KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 153KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rol Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE