Behavioral task
behavioral1
Sample
870b0951697968fe13d410ca397e3a20061320d6f40e21640e6cb3b19e958ce1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
870b0951697968fe13d410ca397e3a20061320d6f40e21640e6cb3b19e958ce1.exe
Resource
win10v2004-20220901-en
General
-
Target
870b0951697968fe13d410ca397e3a20061320d6f40e21640e6cb3b19e958ce1
-
Size
246KB
-
MD5
afe329e0c63aa9567472161546743ef4
-
SHA1
bd12b371ed681cf2b0e3245736e9552410d6b295
-
SHA256
870b0951697968fe13d410ca397e3a20061320d6f40e21640e6cb3b19e958ce1
-
SHA512
1d5909bac5b64f75c4028c7eeeb64a4c6b86d9372896b00bb32310678433fba9b2f5e0a607238abaaa6d45918e19f67e6e668afd2740509d468c8a99306e79ca
-
SSDEEP
6144:epEmDh+rqwXMN9E1o9wGybDmFQcy76oA:epEmDh+rqwXMN9Eq9wGy/mqc
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
870b0951697968fe13d410ca397e3a20061320d6f40e21640e6cb3b19e958ce1.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE