Behavioral task
behavioral1
Sample
b9886c6830fef45a5217536c616525e59881fa082dc7275c6718bd8d0eba41be.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b9886c6830fef45a5217536c616525e59881fa082dc7275c6718bd8d0eba41be.exe
Resource
win10v2004-20220901-en
General
-
Target
b9886c6830fef45a5217536c616525e59881fa082dc7275c6718bd8d0eba41be
-
Size
170KB
-
MD5
f91213682c7083e8b86d6dac3ce664d5
-
SHA1
74649e58226c963a427c8fa3c75c86333d8ec2b3
-
SHA256
b9886c6830fef45a5217536c616525e59881fa082dc7275c6718bd8d0eba41be
-
SHA512
9d85181169926774e618cfdfe395b19e8033b0ae47b2a7e426f1a66cfe67256d3e7ee7430d059f0c94ea2f1a1d89c09ee3af898217a5bae631e98b755f957eee
-
SSDEEP
1536:MxpenxJ4R28x1fmfBMN3EFhcU5OQAkTy+1DsRU9RMOdan5SDA0HbB:M+np81fmfyShFb1DsRQIn5SDAa
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b9886c6830fef45a5217536c616525e59881fa082dc7275c6718bd8d0eba41be.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE