Behavioral task
behavioral1
Sample
b1b4f90ce27da9eaeaf60e6cd923c743af292bb9c4aa8591fbf90d36da81aea6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b1b4f90ce27da9eaeaf60e6cd923c743af292bb9c4aa8591fbf90d36da81aea6.exe
Resource
win10v2004-20221111-en
General
-
Target
b1b4f90ce27da9eaeaf60e6cd923c743af292bb9c4aa8591fbf90d36da81aea6
-
Size
41KB
-
MD5
11dae3c7d97882d582104b74c82e8572
-
SHA1
eb20d7e485902df786c6d55397963c1f4f31b3bc
-
SHA256
b1b4f90ce27da9eaeaf60e6cd923c743af292bb9c4aa8591fbf90d36da81aea6
-
SHA512
1cef8a7849c2d8ec3bda2eda2e535a11f16e6f9afecfbfca51118b38b9164433cc9aee464b5302dba5cea7258cba5912c686c1045552925bda36ba04831a35b2
-
SSDEEP
768:5J4tQf6WvobgFvzmHvuNMN+PzyKZWgr2NJh0rfw+gNZLgW6TxK3FS7Sv:n223o0Ryu7ZZr2NJ6ro+gNZqKVSOv
Malware Config
Signatures
Files
-
b1b4f90ce27da9eaeaf60e6cd923c743af292bb9c4aa8591fbf90d36da81aea6.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ