Behavioral task
behavioral1
Sample
b108cf5144cc3759282f8bd62c06764aed07ed3391fe66e31011bba7b0d0e797.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b108cf5144cc3759282f8bd62c06764aed07ed3391fe66e31011bba7b0d0e797.exe
Resource
win10v2004-20221111-en
General
-
Target
b108cf5144cc3759282f8bd62c06764aed07ed3391fe66e31011bba7b0d0e797
-
Size
111KB
-
MD5
de78d1311a42a0f0282947d2985947b9
-
SHA1
64b3a4289b09cc3f17c4bb313b118fb53b420f37
-
SHA256
b108cf5144cc3759282f8bd62c06764aed07ed3391fe66e31011bba7b0d0e797
-
SHA512
38f82e5e47a517626416bdec57e84e5e88990e15bfde6cffe37d49db7e2efd5ec2690cf267d45e1e1bde44e6be1022dbc2f0e31d296cd4250b7858d0fa496b74
-
SSDEEP
3072:L1+MJKrUnFYY5z1i0Nmbi5fJBNPhkout:JIrPj0NmWtNyoS
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b108cf5144cc3759282f8bd62c06764aed07ed3391fe66e31011bba7b0d0e797.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 109KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE