Behavioral task
behavioral1
Sample
bc9c412ebd9b7b014490aacacc8f4c747ad192c0505fca985da19b360756e328.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bc9c412ebd9b7b014490aacacc8f4c747ad192c0505fca985da19b360756e328.exe
Resource
win10v2004-20220812-en
General
-
Target
bc9c412ebd9b7b014490aacacc8f4c747ad192c0505fca985da19b360756e328
-
Size
294KB
-
MD5
c22126442219d749f0c8b4e9cf27dbf6
-
SHA1
b6cd3bfc26ec4ae15993b07da35f065790101994
-
SHA256
bc9c412ebd9b7b014490aacacc8f4c747ad192c0505fca985da19b360756e328
-
SHA512
66879029f04928cf6545c3a0fb905ec259efe0c2b7791425248c288a25c8b3327a3b12677e968a67b7423cb398f1a403622e6eca780876a36bfe7a4dd9d1df32
-
SSDEEP
6144:mduErzP28LlcU2cp5rzm4vqvxvOvKvLvwvtvHvt11:4P5tHp1
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
bc9c412ebd9b7b014490aacacc8f4c747ad192c0505fca985da19b360756e328.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE