Behavioral task
behavioral1
Sample
b1361672d2d356d429240e6b73b71b8ef8d74d799fc4d6d1f2a0a0225dc61aed.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b1361672d2d356d429240e6b73b71b8ef8d74d799fc4d6d1f2a0a0225dc61aed.exe
Resource
win10v2004-20221111-en
General
-
Target
b1361672d2d356d429240e6b73b71b8ef8d74d799fc4d6d1f2a0a0225dc61aed
-
Size
208KB
-
MD5
684d50290247aab6fc17aafb37625cb9
-
SHA1
fc8de3b4dc4fa12921c37dd19136e9f8ecee4c4c
-
SHA256
b1361672d2d356d429240e6b73b71b8ef8d74d799fc4d6d1f2a0a0225dc61aed
-
SHA512
1e046dc2b6dc8484227c5d4b7c8430b77b0cc23791adfbfdafefaebbb4c8dc94aac96dd42da08314ced52ea8182d1b3a67f04c1ef02cd554d6b88d274c124b2c
-
SSDEEP
3072:FM3RGN/sW1T4CJi68ej9h68xHW975j5mew/Ow/KQtF:G4/PF4uiW9w8xHCn1w23QtF
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b1361672d2d356d429240e6b73b71b8ef8d74d799fc4d6d1f2a0a0225dc61aed.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE