Behavioral task
behavioral1
Sample
b69777340026e91b968d46c54b7aece62c7b34f73400b573e4a0332896b18497.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b69777340026e91b968d46c54b7aece62c7b34f73400b573e4a0332896b18497.exe
Resource
win10v2004-20221111-en
General
-
Target
b69777340026e91b968d46c54b7aece62c7b34f73400b573e4a0332896b18497
-
Size
416KB
-
MD5
3fa8807d7b0a12b25f293b5c486a84e9
-
SHA1
5ea690570ccce57d1a2ae3f32698679ee741e89a
-
SHA256
b69777340026e91b968d46c54b7aece62c7b34f73400b573e4a0332896b18497
-
SHA512
e0aeb2cc3d7d3c054cb9f2d1d15e02c0cc5a6b1206e972f9a626e4aebdb2bf1f536b2d02fd8b4068b3ee264714a00cd015bbdd8b942909e0a66a01ae878b8de0
-
SSDEEP
6144:mdg5hMT+EDFFjPohTNvS5K7EH+fL14n8xXXykYMHknIGuVpcccZPTsRYnnsl8Cj:55hZED/jMNoK7vqnUHvYMHOZrsRgi8+
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b69777340026e91b968d46c54b7aece62c7b34f73400b573e4a0332896b18497.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 148KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE