Behavioral task
behavioral1
Sample
bf09c36235b5b0e8987b45c4490204ebcacb57faa1642935a5a30bf60cd41694.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bf09c36235b5b0e8987b45c4490204ebcacb57faa1642935a5a30bf60cd41694.exe
Resource
win10v2004-20221111-en
General
-
Target
bf09c36235b5b0e8987b45c4490204ebcacb57faa1642935a5a30bf60cd41694
-
Size
1.6MB
-
MD5
5494d9f5d2eec8b803041ba210bff026
-
SHA1
76aa06b1d31f11b24649432940ac3c5a7196e305
-
SHA256
bf09c36235b5b0e8987b45c4490204ebcacb57faa1642935a5a30bf60cd41694
-
SHA512
9b30fb8a286ceb3bfdd1d4c9207f89567e15aa2a9a804ba1e11dd49337c87faef16611b4f78d47780f6b39aad4b6be251ab5c0c6fa8773e13808c10e4baf1eef
-
SSDEEP
49152:Z3ytBb4ViBVjpVYVvHCSTniLGUFVrAFFZLmz:MtBb4V+WaSTni6IFs2
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
bf09c36235b5b0e8987b45c4490204ebcacb57faa1642935a5a30bf60cd41694.exe windows x86
77a2768c741c7770a8213ae848859d2c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateProcess
GetModuleHandleA
LoadLibraryA
VirtualAlloc
GetModuleFileNameA
ExitProcess
user32
wsprintfA
MessageBoxA
Sections
.text Size: - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 820KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX1 Size: 588KB - Virtual size: 587KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 116B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ