Behavioral task
behavioral1
Sample
bf6c64378a48fa7a3cc022aaa19349e1d1796ed8dd41f3c5ab2f96416bce1463.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bf6c64378a48fa7a3cc022aaa19349e1d1796ed8dd41f3c5ab2f96416bce1463.exe
Resource
win10v2004-20220901-en
General
-
Target
bf6c64378a48fa7a3cc022aaa19349e1d1796ed8dd41f3c5ab2f96416bce1463
-
Size
3.0MB
-
MD5
d3482bd7170162e86e4daa18c570b33b
-
SHA1
d978e0176952140db740012937996eda37ca3ed3
-
SHA256
bf6c64378a48fa7a3cc022aaa19349e1d1796ed8dd41f3c5ab2f96416bce1463
-
SHA512
868f2d1518cf7248b1dcd2e69ce8afa10b875de0b8e86a82bf54286c69bd9e042866da51a3b9db4646b875b18b45f7c277cbc9fc7f8c692e37c245d2baa2a135
-
SSDEEP
98304:TjpD0cXZQSSLipxU2bKcqDch+91CH0Aoga:2QZQbLicfc+91CZoga
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
bf6c64378a48fa7a3cc022aaa19349e1d1796ed8dd41f3c5ab2f96416bce1463.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 844KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 279KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE