Behavioral task
behavioral1
Sample
b558ea41ee93ac0700509ebc1143fc3ea875544d78d8c89376d8497269f997db.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b558ea41ee93ac0700509ebc1143fc3ea875544d78d8c89376d8497269f997db.exe
Resource
win10v2004-20220812-en
General
-
Target
b558ea41ee93ac0700509ebc1143fc3ea875544d78d8c89376d8497269f997db
-
Size
203KB
-
MD5
788d56875573803bc2846c51ba602387
-
SHA1
cb25b588e4cea85a072d261d2d5b3ea00eb337d3
-
SHA256
b558ea41ee93ac0700509ebc1143fc3ea875544d78d8c89376d8497269f997db
-
SHA512
fad9f0b3a7857d1f2e0fb6af999e1197000795a569f58fffd8bb4fa1342b574d9af0180e26acad5e439ef4c79f57523cc41ff2190fc838cf5f2d6f1d92870e58
-
SSDEEP
6144:b7GhvB9G6p1IiGzwbRvoMMMMMMMMMMMMMMMMMMMBMMMMMMMMMMMMMMMMMMMfaP6B:bgKaiw1voMMMMMMMMMMMMMMMMMMMBMMo
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b558ea41ee93ac0700509ebc1143fc3ea875544d78d8c89376d8497269f997db.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 348KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 150KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE