Behavioral task
behavioral1
Sample
dba8fb4edcb6b88ef53d6948a193f7fd14f7d33a62730636fc9096c0e7121276.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
dba8fb4edcb6b88ef53d6948a193f7fd14f7d33a62730636fc9096c0e7121276.exe
Resource
win10v2004-20220812-en
General
-
Target
dba8fb4edcb6b88ef53d6948a193f7fd14f7d33a62730636fc9096c0e7121276
-
Size
365KB
-
MD5
b49b0f3d8d8b57447029061c627d8a19
-
SHA1
64d15d20dd9fb24ff7794b90ad8db9b5cfc8648d
-
SHA256
dba8fb4edcb6b88ef53d6948a193f7fd14f7d33a62730636fc9096c0e7121276
-
SHA512
0b43a2315e726b835f37831abd1753931bc9e3293d8403a16e4f91c506238383b250e633000e8c9fb28f381e30ee1dcda4f7c52520969d4a0c6275474c35489d
-
SSDEEP
3072:NnwPtNdVFJxkj33CiDlGmiJni6oAHkvAJyPIBtZk:liQ3ND21DHGkLk
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
dba8fb4edcb6b88ef53d6948a193f7fd14f7d33a62730636fc9096c0e7121276.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE