Behavioral task
behavioral1
Sample
b191ead912b684cc6d3a9c7e453be55eade25ef98d88c27e5ab20a58b3002e20.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b191ead912b684cc6d3a9c7e453be55eade25ef98d88c27e5ab20a58b3002e20.exe
Resource
win10v2004-20221111-en
General
-
Target
b191ead912b684cc6d3a9c7e453be55eade25ef98d88c27e5ab20a58b3002e20
-
Size
630KB
-
MD5
c67c1222f98033b7e28738d0a696da4a
-
SHA1
b4a6fd05d4e0946a3eae8a6d30a0821f7c781cb5
-
SHA256
b191ead912b684cc6d3a9c7e453be55eade25ef98d88c27e5ab20a58b3002e20
-
SHA512
ca93642c3f34448d98e21c55a27291879a99ec1d96748fdf42f0f206763a6d63e2676b144a8d4ffdaa8cc1126afc0fee14c0329864ee2af48726fb1eab96f09e
-
SSDEEP
12288:7C3TOBFkdVqrVl38eJVICt/hvdd7raHdx8svevtUlZR+1mQPkA4:7C6937V71rYdT0toZR+0Q/4
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b191ead912b684cc6d3a9c7e453be55eade25ef98d88c27e5ab20a58b3002e20.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 620KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE