Behavioral task
behavioral1
Sample
3b20ac358f9e81823551339c72e80b8394381971db915b583495d4e8ef748da5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3b20ac358f9e81823551339c72e80b8394381971db915b583495d4e8ef748da5.exe
Resource
win10v2004-20221111-en
General
-
Target
3b20ac358f9e81823551339c72e80b8394381971db915b583495d4e8ef748da5
-
Size
357KB
-
MD5
c50eb5bec5ceef8c768fe890ced4bee5
-
SHA1
9da9d7985ba990148eb44e91bdd0767e15f5473e
-
SHA256
3b20ac358f9e81823551339c72e80b8394381971db915b583495d4e8ef748da5
-
SHA512
77d93860b64c2a7a808395e2188cc3c1f79bd55589396b373383c8f2f68ad17416d0ef2835a8e756ea8e8eb0ecaaee49349257c7fc07a35b89b9b961aa0cbc31
-
SSDEEP
6144:oz5Ocsy9mxhaPVZu204qh7NA81R4Y0jNUteJAZu72zXqM3/r1Nt92plixFIxV/l9:oM7y9+0nuWq3A81xLteJAZCGlApl+Ixk
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
3b20ac358f9e81823551339c72e80b8394381971db915b583495d4e8ef748da5.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 556KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 344KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE