Behavioral task
behavioral1
Sample
bede34f6e333bc8e07ef935048f743d5666b2880d03dcfa402640282ce2d9cf1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bede34f6e333bc8e07ef935048f743d5666b2880d03dcfa402640282ce2d9cf1.exe
Resource
win10v2004-20220812-en
General
-
Target
bede34f6e333bc8e07ef935048f743d5666b2880d03dcfa402640282ce2d9cf1
-
Size
250KB
-
MD5
067453da496f4da9777809322d23a899
-
SHA1
edc6df9469d8aae4bd7a22b1b047780f11c2229a
-
SHA256
bede34f6e333bc8e07ef935048f743d5666b2880d03dcfa402640282ce2d9cf1
-
SHA512
86fe4dc71abeca2f5d17cf66a99bf4995633880269bfd26ff5a91addc5c376ddcc1cadf1b11246ff18a46889145d2eb82ec4e3177c6e5e202688fdb46c072afe
-
SSDEEP
1536:bqkM3Q5guLNl+3m2MPFo8SeoHhWzHMtyinTMmkhYSjGBZu2G/7u08b/MIPJ0UTsW:bqkMkPJlp2MihbHMAYMVSjKXJh0UQ
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
bede34f6e333bc8e07ef935048f743d5666b2880d03dcfa402640282ce2d9cf1.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE