Behavioral task
behavioral1
Sample
bda002101616000036c48e18b7e256797bbabfa8f0c65d171c87b5e32760ca85.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bda002101616000036c48e18b7e256797bbabfa8f0c65d171c87b5e32760ca85.exe
Resource
win10v2004-20221111-en
General
-
Target
bda002101616000036c48e18b7e256797bbabfa8f0c65d171c87b5e32760ca85
-
Size
113KB
-
MD5
3c489b7548ed0332e44c300fadbc2df8
-
SHA1
95c1d3324ef0babc6ba576e44f4d79e02ad2dced
-
SHA256
bda002101616000036c48e18b7e256797bbabfa8f0c65d171c87b5e32760ca85
-
SHA512
b5b2597c4c1efd47ef93e5d6ea4746e741563dc6f53aaf3ca17973ca51c7ae4ffda988e3f091c546d6dae5284173311627047eea8a002a9ec0b100217284c6f8
-
SSDEEP
3072:vweWxbS77FD6lTZm3NsVyKMKyoduZSnYWv8PqsFqEE0L43W:vw3VSvFD0ZEDV0Ys8yyqEE0L7
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
bda002101616000036c48e18b7e256797bbabfa8f0c65d171c87b5e32760ca85.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CUPX1 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE