Behavioral task
behavioral1
Sample
ba4300c423e5a4fc16a2925f24f2bf8da468cc58499acabeb22c79fa96f1ff92.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ba4300c423e5a4fc16a2925f24f2bf8da468cc58499acabeb22c79fa96f1ff92.exe
Resource
win10v2004-20221111-en
General
-
Target
ba4300c423e5a4fc16a2925f24f2bf8da468cc58499acabeb22c79fa96f1ff92
-
Size
400KB
-
MD5
632e241961615f773e2739ae5435895c
-
SHA1
baf69e84aa42640ec03b03c739d5594150b67898
-
SHA256
ba4300c423e5a4fc16a2925f24f2bf8da468cc58499acabeb22c79fa96f1ff92
-
SHA512
ef413307fa4cea2b33a72c775884204834999f18427ecf951ccd0bcec3cee2d130263f051be94829b9fd1db6e9f5f1b17b58b2f808b875f878961859d41d98e8
-
SSDEEP
6144:NWfu0pfnX3FABGTstkPl+sFHxly46nJHTw:NWfu0RnHFA/kPQsRzUhc
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ba4300c423e5a4fc16a2925f24f2bf8da468cc58499acabeb22c79fa96f1ff92.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE