Behavioral task
behavioral1
Sample
b05aa9953b2d82a60b6feace2961b4ac52c615b2f2ca650e663af4f3d8a15cf2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b05aa9953b2d82a60b6feace2961b4ac52c615b2f2ca650e663af4f3d8a15cf2.exe
Resource
win10v2004-20221111-en
General
-
Target
b05aa9953b2d82a60b6feace2961b4ac52c615b2f2ca650e663af4f3d8a15cf2
-
Size
182KB
-
MD5
aca42b1c4aa069ee01ae71c16572b326
-
SHA1
6651a6443b69965e670a25e5a1b0c7af0599933e
-
SHA256
b05aa9953b2d82a60b6feace2961b4ac52c615b2f2ca650e663af4f3d8a15cf2
-
SHA512
3c93b593fd368b1fec56bb61cdec57a10d2aa527f0f0cc7bf70885c96c801941d6f6eafe4fb18be92b8dedfb96e0dd612daa3863a574196028ed007206cc9acc
-
SSDEEP
3072:fyU/1GDaOLnaIQkNlydEtbgLxcdlzQf3Ni/1qWjaBwA00oUbeqthDNeMzqjCtouO:qaGDa+ndQkNlgEtb0xS+3i1qWjaBQ0o5
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b05aa9953b2d82a60b6feace2961b4ac52c615b2f2ca650e663af4f3d8a15cf2.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1020KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 169KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE