Behavioral task
behavioral1
Sample
b9605a70c4aea1b215b1949db8028cef3c8bb9e1df2e4507ac01cc91213c9bdc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b9605a70c4aea1b215b1949db8028cef3c8bb9e1df2e4507ac01cc91213c9bdc.exe
Resource
win10v2004-20220901-en
General
-
Target
b9605a70c4aea1b215b1949db8028cef3c8bb9e1df2e4507ac01cc91213c9bdc
-
Size
266KB
-
MD5
0aa925df2d26255782b4ec59ee7fcedc
-
SHA1
5ee2f2f31cf8a1ef52182074dac68b11e9ba3505
-
SHA256
b9605a70c4aea1b215b1949db8028cef3c8bb9e1df2e4507ac01cc91213c9bdc
-
SHA512
11ddd877d09a3b07b35128874564275c2295031e1c39176f86060b74ca1d94333072d7d4d45fd4b0471c3f5e5ffef48bf34e8d3ceb7daee592628217ee8836ea
-
SSDEEP
6144:DpgQLY6pTkuReXHdNFh1AGBC6+vuG/ewGUr2s/u2h1:tpQuReXHdNF3xC6+2G/ewGR
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b9605a70c4aea1b215b1949db8028cef3c8bb9e1df2e4507ac01cc91213c9bdc.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nj�rypt Size: 512B - Virtual size: 4KB