Behavioral task
behavioral1
Sample
b6a63c1d14cc5f2a681859da083f1458651ecf0131eed2fc24f9b7e32c933931.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b6a63c1d14cc5f2a681859da083f1458651ecf0131eed2fc24f9b7e32c933931.exe
Resource
win10v2004-20221111-en
General
-
Target
b6a63c1d14cc5f2a681859da083f1458651ecf0131eed2fc24f9b7e32c933931
-
Size
171KB
-
MD5
9140b8b3aac046bcc8680733eca2dbd0
-
SHA1
bfc1e30924524381f5be1882390e8c2d57841935
-
SHA256
b6a63c1d14cc5f2a681859da083f1458651ecf0131eed2fc24f9b7e32c933931
-
SHA512
79b861a140b0145b30da4dcf6494d086c438971b1786daefe7975ec77d436d274c9a9fb2a1acfe890a568125e115a25614088c39c6d1b947198306346011f11c
-
SSDEEP
3072:ku45GsDsjRBxVQPBNMqr7N9yh3ks4bYQUzatVFpkl5XwuR99D1svDXuhtdBqAaVX:klUQLjSh3lMBpGR9VIXutAAaDvoSV9
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b6a63c1d14cc5f2a681859da083f1458651ecf0131eed2fc24f9b7e32c933931.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 167KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE