Behavioral task
behavioral1
Sample
bd39bfa3cd7b5db0f52c25f89f73308759e3dd9e80c917b2a02700ac5698fe7d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bd39bfa3cd7b5db0f52c25f89f73308759e3dd9e80c917b2a02700ac5698fe7d.exe
Resource
win10v2004-20221111-en
General
-
Target
bd39bfa3cd7b5db0f52c25f89f73308759e3dd9e80c917b2a02700ac5698fe7d
-
Size
719KB
-
MD5
d87243fc535e7103aa2ae3a81ce6cbac
-
SHA1
f56be5341b590ef798ed8d1b292b2cc271d2bf5d
-
SHA256
bd39bfa3cd7b5db0f52c25f89f73308759e3dd9e80c917b2a02700ac5698fe7d
-
SHA512
e44e746b62af73b28a6303bddf7ac4cfa5a924c919376b6af78e762e1eef150569030be8c9b889743d52d920397bea8d719671a04c67a0c378dd91a8d5299ba6
-
SSDEEP
12288:vg1+ltFGfXoe/xJlSzLgHzbTqz5kSoXtY9nGCT2Q+nWN9D9LOyYvjrEt:vE+1GVxJlSnYbSvo90nQOFVOysHEt
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
bd39bfa3cd7b5db0f52c25f89f73308759e3dd9e80c917b2a02700ac5698fe7d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE