Behavioral task
behavioral1
Sample
b0202e23cbb0b5b53597fd945bc37a1625b87172e8c18143305775f3f74329b4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b0202e23cbb0b5b53597fd945bc37a1625b87172e8c18143305775f3f74329b4.exe
Resource
win10v2004-20221111-en
General
-
Target
b0202e23cbb0b5b53597fd945bc37a1625b87172e8c18143305775f3f74329b4
-
Size
484KB
-
MD5
89d208ec55352a5adcbac45f1d19faa7
-
SHA1
09483ad61cb28dfe277fccf8af36b2d03eb06106
-
SHA256
b0202e23cbb0b5b53597fd945bc37a1625b87172e8c18143305775f3f74329b4
-
SHA512
c74511c2c9d14d442e8b0b8d8dfa648c1cd7e0a5c9915c4774de2db9ed43323797206764497a69f835a7a26f1c9d5c81321c8e8156f3656937e7626363749e3c
-
SSDEEP
12288:D3l1Fbni953LoeGUF7cpQrCOENiVCjuTFr173CN:rlvi9BHGUJcdNNSCaTFB7q
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b0202e23cbb0b5b53597fd945bc37a1625b87172e8c18143305775f3f74329b4.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 312KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 442KB - Virtual size: 444KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE