Behavioral task
behavioral1
Sample
b06e835b5f1552bbe5258c57624b7313718788e86187a85f3b053f97c904a270.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b06e835b5f1552bbe5258c57624b7313718788e86187a85f3b053f97c904a270.exe
Resource
win10v2004-20220812-en
General
-
Target
b06e835b5f1552bbe5258c57624b7313718788e86187a85f3b053f97c904a270
-
Size
151KB
-
MD5
3a0daff976bef0ad00f09520a0338dd4
-
SHA1
087e8908080284a01cd2e35a459c2bd264397d15
-
SHA256
b06e835b5f1552bbe5258c57624b7313718788e86187a85f3b053f97c904a270
-
SHA512
c9d794e5d4fd5aa124c676f58a296aa7566204d49e88522a8a0e924f025a776030b5586427e661fded3782731bfcc2568e699d8fc327c6878d4ffc20b6f45bf6
-
SSDEEP
3072:c6kamMIB+X4ZwhJ21gXwh3aJewlX0RlXFoKODQdVPrkLsRJnouvF:c6kaQBfWry3YewSqQ3tJnoEF
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b06e835b5f1552bbe5258c57624b7313718788e86187a85f3b053f97c904a270.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 152KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 148KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE