Behavioral task
behavioral1
Sample
bf8a8012b61973d1668a8e5b5407dc5bc4e6435b8bbb19fffa6c3d3e626b909a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bf8a8012b61973d1668a8e5b5407dc5bc4e6435b8bbb19fffa6c3d3e626b909a.exe
Resource
win10v2004-20221111-en
General
-
Target
bf8a8012b61973d1668a8e5b5407dc5bc4e6435b8bbb19fffa6c3d3e626b909a
-
Size
581KB
-
MD5
880d94f69094d1d9e26eca582423dc7c
-
SHA1
070f28e3325af6077b4503f839a5eb7aa17e2fbd
-
SHA256
bf8a8012b61973d1668a8e5b5407dc5bc4e6435b8bbb19fffa6c3d3e626b909a
-
SHA512
e8d357c5e64314c92d5ef6a02093112377dc5b48cbd645e7bbcf247ae3b71d6948cb6950552ae7bc00ff18fcb6f9532eaa92b6a909e869198f2b1f5d260896e8
-
SSDEEP
768:36ZlM6/o2GwfYV//O4CHB9Ueu6B0Sf4tYa3GYsq23gsCq23gssq23gsx:36+2LfYJJBSfHa3GYWwCt
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
bf8a8012b61973d1668a8e5b5407dc5bc4e6435b8bbb19fffa6c3d3e626b909a.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 552KB - Virtual size: 552KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE