Behavioral task
behavioral1
Sample
bf3120a0351800f7d32c74abef0f2fa815b19c17bc76de2239ee71dc5d12d39b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bf3120a0351800f7d32c74abef0f2fa815b19c17bc76de2239ee71dc5d12d39b.exe
Resource
win10v2004-20220812-en
General
-
Target
bf3120a0351800f7d32c74abef0f2fa815b19c17bc76de2239ee71dc5d12d39b
-
Size
38KB
-
MD5
c199c7d8f1f8cbf0594fab8a06435ee9
-
SHA1
897a97b053e51a2867dd54bb9dee8e49ed680b84
-
SHA256
bf3120a0351800f7d32c74abef0f2fa815b19c17bc76de2239ee71dc5d12d39b
-
SHA512
436faad8715dfaa3265532c73eb38e74683d885a4ec56e4690d2426a8b9562d02c6bf1d9152713a037cc1e592057144bb2dd02ce50cff3df5be28eb7017a6ff5
-
SSDEEP
384:5Mki1ScSdmj2ZFCU3HAPrRwja5J1eaB3YZp0Z3LInfyNEB/rJ4x+OpmNTNXs3Gm+:5Mt1/YR13HAzaO5N3Y/F4unX5rys
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
bf3120a0351800f7d32c74abef0f2fa815b19c17bc76de2239ee71dc5d12d39b.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE