Behavioral task
behavioral1
Sample
b213b8907d27934b9485d49dac355d79a007f70b035973e94ac67ace6ef6af9f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b213b8907d27934b9485d49dac355d79a007f70b035973e94ac67ace6ef6af9f.exe
Resource
win10v2004-20220901-en
General
-
Target
b213b8907d27934b9485d49dac355d79a007f70b035973e94ac67ace6ef6af9f
-
Size
985KB
-
MD5
3146dde80d88bcf99411e2d189d4d448
-
SHA1
a493f810995b977b7f8b48c8e409c08f452e5860
-
SHA256
b213b8907d27934b9485d49dac355d79a007f70b035973e94ac67ace6ef6af9f
-
SHA512
715b0ef193e71578ed593412ce2ade5e53f0a3bf9c80340b567729f8da2ee5b3a500dc1d74521d2422531bcfd3c8797d58c7f0b98d39673b01f793c1452414ee
-
SSDEEP
24576:R1XGY8JgSQU127i3PGjIcNH1sF0QEv9KOoQCW45U9tU1e2Wy:R1mPx1B3PsIchi2SdQCJ+u1R
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b213b8907d27934b9485d49dac355d79a007f70b035973e94ac67ace6ef6af9f.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 981KB - Virtual size: 984KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE