Behavioral task
behavioral1
Sample
0bfb7ea91c076136c4e8ae3202cb61fce2719b0cd6f313461bf918160dfcdd20.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0bfb7ea91c076136c4e8ae3202cb61fce2719b0cd6f313461bf918160dfcdd20.exe
Resource
win10v2004-20220901-en
General
-
Target
0bfb7ea91c076136c4e8ae3202cb61fce2719b0cd6f313461bf918160dfcdd20
-
Size
811KB
-
MD5
bb2eae9b4335de9b4ff9a37484638b11
-
SHA1
07fd458a5f92abcab6ce926669412aabc3c8d926
-
SHA256
0bfb7ea91c076136c4e8ae3202cb61fce2719b0cd6f313461bf918160dfcdd20
-
SHA512
be37419cccbe9c021204aa86a7ac883ec1631f1ada7ffccf036b8e093fce3ff5d162b2119877f7a11c41b306a97cdd1e979270e14d2f62243f97c3d138efdb84
-
SSDEEP
24576:H9IUQOu+wxG68PHaSB9seWEFa0TWB7GYHW:H9IUQJdBSB9seWeno7vHW
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
0bfb7ea91c076136c4e8ae3202cb61fce2719b0cd6f313461bf918160dfcdd20.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 803KB - Virtual size: 804KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE