Behavioral task
behavioral1
Sample
b3dc066200a2062384437d5b4d988c2e86e239d980347d8642b07eec94dbf036.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b3dc066200a2062384437d5b4d988c2e86e239d980347d8642b07eec94dbf036.exe
Resource
win10v2004-20221111-en
General
-
Target
b3dc066200a2062384437d5b4d988c2e86e239d980347d8642b07eec94dbf036
-
Size
130KB
-
MD5
c8d8a96ba08fe5eab247ba445f98bd0a
-
SHA1
ce4a6cdf2d08c53b21d919c73c71ea439b9e7d4f
-
SHA256
b3dc066200a2062384437d5b4d988c2e86e239d980347d8642b07eec94dbf036
-
SHA512
f326b07190ec3fd3caa4a3295c4ce4d0a8044e677f0e1431a6dc6fa36c878ef513dbd2761a110c043a092e44e3c101a09d0ffe7c15dd320fa55cb2f9efeb6ac9
-
SSDEEP
3072:mcCFryO4hDwM5BiNIR8A3n+Q9vRTNJTmRzPv05qFKzCk75:mcCFrxJsJ3n+QdZ/mL0kKzCE
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b3dc066200a2062384437d5b4d988c2e86e239d980347d8642b07eec94dbf036.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 156KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ujoxeqg Size: - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zqkomzn Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE