Behavioral task
behavioral1
Sample
b17508a4a061067af01cfa1deb6c78e1450bed8db958c982cd135a3f9aae38a4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b17508a4a061067af01cfa1deb6c78e1450bed8db958c982cd135a3f9aae38a4.exe
Resource
win10v2004-20220812-en
General
-
Target
b17508a4a061067af01cfa1deb6c78e1450bed8db958c982cd135a3f9aae38a4
-
Size
9KB
-
MD5
cb301a6af546c39d2ab6cf5af710ff12
-
SHA1
d5c25da7a2c30661ab8bcd80306fc31094810cc0
-
SHA256
b17508a4a061067af01cfa1deb6c78e1450bed8db958c982cd135a3f9aae38a4
-
SHA512
2270dbeae7f6f23d98a2a7bd64131fb690131d805c74b3445e7afe5f43c10023028528ba0d75e313e4d47735c41f5c1754ef0a7f8648100cc9a9b822d29e27d8
-
SSDEEP
192:TLLJbOov9SqsvyuP1BfwfE5WOUgnOLAVwbeSeWDXbSu:nLNSNXzM8SbeSeWDLS
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b17508a4a061067af01cfa1deb6c78e1450bed8db958c982cd135a3f9aae38a4.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE