Behavioral task
behavioral1
Sample
bd59dcb848a4d411b7b48b8fa6884b6f0c7f2a4e45a69f9657df963ade012157.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bd59dcb848a4d411b7b48b8fa6884b6f0c7f2a4e45a69f9657df963ade012157.exe
Resource
win10v2004-20220812-en
General
-
Target
bd59dcb848a4d411b7b48b8fa6884b6f0c7f2a4e45a69f9657df963ade012157
-
Size
361KB
-
MD5
71c7b131db225df9bf39a1e8b8330e3d
-
SHA1
35dc0b0d6560d1ccfa8431d49be946b63c8c2dca
-
SHA256
bd59dcb848a4d411b7b48b8fa6884b6f0c7f2a4e45a69f9657df963ade012157
-
SHA512
3ce13e1e37b8e20c3c47c1f79e3ba52626a5d52d64fccc52789723cfd7881b71b74fe42ad76103d34636497e322f8abda38c29cb50020d837d36a798762cd21a
-
SSDEEP
6144:VEM/ntmQnFYg4SG6pX0nheqYv6bU5fAB9cdlhiU9qVIQrFn4vfwHG+:VEM/ntmWFfm6R0hocUFFlp4I4Fn4vfwt
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
bd59dcb848a4d411b7b48b8fa6884b6f0c7f2a4e45a69f9657df963ade012157.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE