Behavioral task
behavioral1
Sample
bb6be1ee873656818764bec9de5d0b329fd36fd00fca2acdba38216c135fd526.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bb6be1ee873656818764bec9de5d0b329fd36fd00fca2acdba38216c135fd526.exe
Resource
win10v2004-20221111-en
General
-
Target
bb6be1ee873656818764bec9de5d0b329fd36fd00fca2acdba38216c135fd526
-
Size
209KB
-
MD5
821bb63e0db04795aec6d757d38b0eb8
-
SHA1
1e39840e26e58bb2e4cd58605aacbc3869f030a0
-
SHA256
bb6be1ee873656818764bec9de5d0b329fd36fd00fca2acdba38216c135fd526
-
SHA512
6358be818421b80b4f1351420c320121a2b2909a282ac9fc5aa14584ed1b35d9dbb5cea25ee1a08b9c2033b038cf959d705a1d8aa086374da4ff4f5294cc677e
-
SSDEEP
3072:Z6NOGKmyzluhCttVSnPVTVAV7nCVzVBVGnnVKVknJVkMnrOVkQBsVzn5V5VnVltR:wCacsPhyhC9H0nIGJRyVmR57tPIfk
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
bb6be1ee873656818764bec9de5d0b329fd36fd00fca2acdba38216c135fd526.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 676KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 310KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4095.9MB - Virtual size: 4095.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE