Behavioral task
behavioral1
Sample
bdb0884c8b0da943300436055e54aac879fe1b908eb0be00666c0319185d6338.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bdb0884c8b0da943300436055e54aac879fe1b908eb0be00666c0319185d6338.exe
Resource
win10v2004-20221111-en
General
-
Target
bdb0884c8b0da943300436055e54aac879fe1b908eb0be00666c0319185d6338
-
Size
363KB
-
MD5
2ae6044b90f76590476e9db361ef4801
-
SHA1
7f3bd80f7bd58655ef1ba15d959cfca0349e9391
-
SHA256
bdb0884c8b0da943300436055e54aac879fe1b908eb0be00666c0319185d6338
-
SHA512
9de80a4ba8b3b358ef61afbbb5f22fccfb7df4a383acd06a70b461cc10ffbb27f3a74411f94263e71af065f431a3d9b62daaba9798e6fb90571874f4dfa83db1
-
SSDEEP
3072:lPT+tR2VBpL/1zxSmBSVB4U0qHvpL/B+PpL/JZjpL/BIXpL/p44jhI/:lPTgQB/tx584U0E/Q/5/K/Da/
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
bdb0884c8b0da943300436055e54aac879fe1b908eb0be00666c0319185d6338.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE