Behavioral task
behavioral1
Sample
b56f1e2351e60a42992431a2c2fcd5e377fff659e13b29f2dd2d12f1c981cbf7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b56f1e2351e60a42992431a2c2fcd5e377fff659e13b29f2dd2d12f1c981cbf7.exe
Resource
win10v2004-20221111-en
General
-
Target
b56f1e2351e60a42992431a2c2fcd5e377fff659e13b29f2dd2d12f1c981cbf7
-
Size
110KB
-
MD5
608e1d6f6413ce94f266752703777f0a
-
SHA1
0a397e4f299e3282d74a09f3c29afe2f741b5925
-
SHA256
b56f1e2351e60a42992431a2c2fcd5e377fff659e13b29f2dd2d12f1c981cbf7
-
SHA512
a9c911ccdbcb8a96dcb564bf5238334f26f2aafec6be5cbe768e77dc554ad3c033d78ac965dc68994c8f5e49e3a4c9d5634892e142a67818fb9ff45fd51c7ea9
-
SSDEEP
1536:Jk3tVEW0VAT6dr0+QaQPqFmToA5pIO39SpuurP3C0Cdu1n3/G:J6g/QaaqFm8A5qGBl0Cdu93/G
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b56f1e2351e60a42992431a2c2fcd5e377fff659e13b29f2dd2d12f1c981cbf7.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE