Behavioral task
behavioral1
Sample
b1fa861d1ddb3d670ac44b35e6f6922cf960d872105eb982a2f288ef0499b74a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b1fa861d1ddb3d670ac44b35e6f6922cf960d872105eb982a2f288ef0499b74a.exe
Resource
win10v2004-20220901-en
General
-
Target
b1fa861d1ddb3d670ac44b35e6f6922cf960d872105eb982a2f288ef0499b74a
-
Size
93KB
-
MD5
007a450f17ae121528b669854f7831f7
-
SHA1
f9d2eaafffe1d0d88b16931bbedf9477fbc00647
-
SHA256
b1fa861d1ddb3d670ac44b35e6f6922cf960d872105eb982a2f288ef0499b74a
-
SHA512
4aff73cce55dced765db4ab75484238799b43fcd4b99ba1cf27abb8f771c45fb73ee489998cad804cbdcb9e753577b2b0d88a7e0134fd9b84a8a15dbc3977b3d
-
SSDEEP
1536:q1jTIB7L7TK4bQ805soIy5rRMOoYQ0JkHC5IiTsYil/ENBZVHafHcO7J:qxT1ZFRMOoKJkHC5IiTsYil8bZV617J
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b1fa861d1ddb3d670ac44b35e6f6922cf960d872105eb982a2f288ef0499b74a.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 176KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 89KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 113KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE