Behavioral task
behavioral1
Sample
be30f8cf228b5fca3db509d6de2c0db36c2ced5eb09fddb264ad859585172309.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
be30f8cf228b5fca3db509d6de2c0db36c2ced5eb09fddb264ad859585172309.exe
Resource
win10v2004-20221111-en
General
-
Target
be30f8cf228b5fca3db509d6de2c0db36c2ced5eb09fddb264ad859585172309
-
Size
193KB
-
MD5
9ef56ba8b75514c8cb5787b5cdc5e7d3
-
SHA1
2fd5953262753bc1d56931049d078df35efd89fc
-
SHA256
be30f8cf228b5fca3db509d6de2c0db36c2ced5eb09fddb264ad859585172309
-
SHA512
b66cc814f5b71c89d935e7f7a9e10f90477ba23baad3b27cccc4587a7133fc7ab43f7f74501fc244e017886db25239ecfb70346aace966fadeea84da32ccf180
-
SSDEEP
3072:pFlUZNlnD5GVr7e0u7qi3lHakej7NBLUd4j/ozsnKUm2itsvZ5oKyMP9:pghDs+PJaP7nQd4j6snKU2GTomP9
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
be30f8cf228b5fca3db509d6de2c0db36c2ced5eb09fddb264ad859585172309.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�PX0 Size: - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE