Behavioral task
behavioral1
Sample
b2e73745380ce96b8c4ff591a5b968d1660df3d828beabbebedbe8754b3b1550.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b2e73745380ce96b8c4ff591a5b968d1660df3d828beabbebedbe8754b3b1550.exe
Resource
win10v2004-20221111-en
General
-
Target
b2e73745380ce96b8c4ff591a5b968d1660df3d828beabbebedbe8754b3b1550
-
Size
648KB
-
MD5
21bcedfe487d7bcefc0972f31d2600c0
-
SHA1
f61516fbf1492e41fd8e5d26163d07654396392d
-
SHA256
b2e73745380ce96b8c4ff591a5b968d1660df3d828beabbebedbe8754b3b1550
-
SHA512
86e4032878d0113325dcd868d0bd48edc01f3d0f33ba1dcc7c0a00c9784f8cc8ae3d2978800d098bf3b3cab30fff2088ee1b24a1720064dd7f0a1f9aa00d8126
-
SSDEEP
12288:rnzoLUcriu/Rq3c8xKHDn5A5WpAiwJ+SjWVRsyzfp2iZ1oS:YLUcriu/QMAaDnwuAiwIeyzfci
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b2e73745380ce96b8c4ff591a5b968d1660df3d828beabbebedbe8754b3b1550.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 637KB - Virtual size: 640KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE