Behavioral task
behavioral1
Sample
b342e4bb479ba9765af535fcafd3fc807929af9ef97ec5882d213c236d1f029c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b342e4bb479ba9765af535fcafd3fc807929af9ef97ec5882d213c236d1f029c.exe
Resource
win10v2004-20221111-en
General
-
Target
b342e4bb479ba9765af535fcafd3fc807929af9ef97ec5882d213c236d1f029c
-
Size
337KB
-
MD5
255f01ef6058d938e92db68c0dda3b5a
-
SHA1
8d981625accf9769d221735b00264dcd8e599eda
-
SHA256
b342e4bb479ba9765af535fcafd3fc807929af9ef97ec5882d213c236d1f029c
-
SHA512
c08738ea78e2bdae1c8beac37968a6bee37ee5a88869a23e120c48af7deacf88dba195ab6f38cf013fd0e2dbdda71e13eac038ac62a5da13d9ac7e0a6bc413ef
-
SSDEEP
6144:2p2JI9MO6NvdAIocGiAy5OUORPWYdEcPBIDULR9WlMRmQg2mmi6BuANuMxDJKdoN:g9avdYNxCIPW8EHU76B/2mXUuAZMoSk
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b342e4bb479ba9765af535fcafd3fc807929af9ef97ec5882d213c236d1f029c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 334KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE