Behavioral task
behavioral1
Sample
b18e99ff9daa2a44f63bc0779811ef330a7f2ab3d3aa6dc260418e444a1b2d93.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b18e99ff9daa2a44f63bc0779811ef330a7f2ab3d3aa6dc260418e444a1b2d93.exe
Resource
win10v2004-20221111-en
General
-
Target
b18e99ff9daa2a44f63bc0779811ef330a7f2ab3d3aa6dc260418e444a1b2d93
-
Size
101KB
-
MD5
41eb7e798ab77a325cca599bd6414380
-
SHA1
392d024a4e7fcaa070c65803dc7fc15976e62949
-
SHA256
b18e99ff9daa2a44f63bc0779811ef330a7f2ab3d3aa6dc260418e444a1b2d93
-
SHA512
806dd156e46e83bd02a8b6d68c781ed979d796a3075fd34fa371469b6e8bd19e88f7b599d00f75e56e5ad6d8d16bd08bb4b493753e7a60d7ecb50454f6425c4d
-
SSDEEP
3072:YlFvlvuREAOoxsdCNcCk+Kfm6nnTTU/T/LouhL:6vRuREAOoxsgN5kdZTonoy
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b18e99ff9daa2a44f63bc0779811ef330a7f2ab3d3aa6dc260418e444a1b2d93.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 160KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 96KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mzzpiqf Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE