Behavioral task
behavioral1
Sample
8bebe9b0776145fce3b6bb4400048a3eab699b31adf77e66effa6be6074ba36d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8bebe9b0776145fce3b6bb4400048a3eab699b31adf77e66effa6be6074ba36d.exe
Resource
win10v2004-20221111-en
General
-
Target
8bebe9b0776145fce3b6bb4400048a3eab699b31adf77e66effa6be6074ba36d
-
Size
719KB
-
MD5
9ce5dcbcc37941148915e3b0016b9b3b
-
SHA1
253ae384e370de1fa8591789db279e94d9773585
-
SHA256
8bebe9b0776145fce3b6bb4400048a3eab699b31adf77e66effa6be6074ba36d
-
SHA512
62ddf4e4d5449b751a12dff3a7379e50a1a0d25b68e3b38bc36629535589d71b63ac5f9abf78159c86a7ea06f619cb7ef30b3d75e18c5978ff06a5693e2f1dab
-
SSDEEP
12288:vg1+lQFGfXoe/xJlSzLgHzbTqz5kSoXtY9nGCT2Q+nWN9D9LOyYvjrEt:vE+kGVxJlSnYbSvo90nQOFVOysHEt
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
8bebe9b0776145fce3b6bb4400048a3eab699b31adf77e66effa6be6074ba36d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE