Behavioral task
behavioral1
Sample
b6e44497739de2ae41fd5818272b1431debb6de3f31d7c4d86900c24baa08fb9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b6e44497739de2ae41fd5818272b1431debb6de3f31d7c4d86900c24baa08fb9.exe
Resource
win10v2004-20220812-en
General
-
Target
b6e44497739de2ae41fd5818272b1431debb6de3f31d7c4d86900c24baa08fb9
-
Size
244KB
-
MD5
0ee6c9ac3991ab317af58812c8b43821
-
SHA1
66878dfd67389e1679a7e24c59b0059963a16e01
-
SHA256
b6e44497739de2ae41fd5818272b1431debb6de3f31d7c4d86900c24baa08fb9
-
SHA512
3288bc746c320f86dc6f68cec63ab3c25985043621817d707d1dedd3997af86649ed842785c0fcd99ae5623eaf137913826db951bae105c7f638754e4dab7a47
-
SSDEEP
6144:811Ae347ppLQAyJJgskpjBGW9Js2YuXQdO5L1Zsvfm:yr34jY2sYBR7dn1svfm
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b6e44497739de2ae41fd5818272b1431debb6de3f31d7c4d86900c24baa08fb9.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 166KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE