Behavioral task
behavioral1
Sample
bda472887fd8a21525178542fc0785c6b0d004455e5ddc9a34013302853325a6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bda472887fd8a21525178542fc0785c6b0d004455e5ddc9a34013302853325a6.exe
Resource
win10v2004-20220901-en
General
-
Target
bda472887fd8a21525178542fc0785c6b0d004455e5ddc9a34013302853325a6
-
Size
332KB
-
MD5
b66f1b3c6024427e9630ac3ec2a1fffc
-
SHA1
2f46ac2a6526eb29431600e375c9a5d7258e3826
-
SHA256
bda472887fd8a21525178542fc0785c6b0d004455e5ddc9a34013302853325a6
-
SHA512
9ca94991ed393ce852dff5fe0b17727ee8f2dc9957bc7e8d94355718318de6c853480cf655a58f18158526aca5209c933bb1a77a15d9fe55628a3c48c1d58f03
-
SSDEEP
6144:BERYRk0OjESRSZclQtoh+dGG9pGJ8XvfrvXUr1KhfoQy5HywMaBf4f0M6Guj9Isg:BECarjEScHtohwGGLGJ8nqInbwXjusta
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
bda472887fd8a21525178542fc0785c6b0d004455e5ddc9a34013302853325a6.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 328KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE