Behavioral task
behavioral1
Sample
b9e75ed8385ed447fc5356ca6592739e1a77d1314da4d8b9726e2bcbe0c4a151.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b9e75ed8385ed447fc5356ca6592739e1a77d1314da4d8b9726e2bcbe0c4a151.exe
Resource
win10v2004-20220812-en
General
-
Target
b9e75ed8385ed447fc5356ca6592739e1a77d1314da4d8b9726e2bcbe0c4a151
-
Size
250KB
-
MD5
3bb021b02df890754df59f38ede56914
-
SHA1
5a2035b92bf003592929034eff69a4abedadf7d4
-
SHA256
b9e75ed8385ed447fc5356ca6592739e1a77d1314da4d8b9726e2bcbe0c4a151
-
SHA512
f09ce201e5e2d62c739c2188fdf974906b7560eb316f250c42869191024875e0cb2012979af243f31284e3434c04d09ff0f51d9f4674f4a5a6ec4a7ae6c9c4a7
-
SSDEEP
6144:046m0jrTmbkfkPWqMA1OkfNRqjYlhb+Zi9:046m0bm4MHOk7XB
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b9e75ed8385ed447fc5356ca6592739e1a77d1314da4d8b9726e2bcbe0c4a151.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 220KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA