Behavioral task
behavioral1
Sample
b01ef2e505fc9f9464bed90c6215edd9b7ca66d84c5943f4ec045d64d17fce63.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b01ef2e505fc9f9464bed90c6215edd9b7ca66d84c5943f4ec045d64d17fce63.exe
Resource
win10v2004-20221111-en
General
-
Target
b01ef2e505fc9f9464bed90c6215edd9b7ca66d84c5943f4ec045d64d17fce63
-
Size
598KB
-
MD5
497034c54aa5c8aa45298e931f40c294
-
SHA1
0c309abcc86207ac286449536d09a72fd244010e
-
SHA256
b01ef2e505fc9f9464bed90c6215edd9b7ca66d84c5943f4ec045d64d17fce63
-
SHA512
4a2c9515ff431267d69376c66606a2439f47d55afa824433ecae9f40d75fe6197afaf4ac27f5d17bf84d78dcca8ec6fdd4b4d3232e2b6b1dc5c146a3506f53b8
-
SSDEEP
12288:Qk/mjXF9rDGjLZGDETvLaO2T2SrGDtGswopMnMmBOiPVn8ZXwahz:f+jXHrDauEjOGSr6csw8WMGJNU9h
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b01ef2e505fc9f9464bed90c6215edd9b7ca66d84c5943f4ec045d64d17fce63.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 860KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 586KB - Virtual size: 588KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE