Behavioral task
behavioral1
Sample
b0c14e85fb6423ea7bf551d3801014f63a29bcc0092db60b47e94058d5bfdb3a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b0c14e85fb6423ea7bf551d3801014f63a29bcc0092db60b47e94058d5bfdb3a.exe
Resource
win10v2004-20220812-en
General
-
Target
b0c14e85fb6423ea7bf551d3801014f63a29bcc0092db60b47e94058d5bfdb3a
-
Size
189KB
-
MD5
4e2e9e4057385d5fb99c0dd2f520103a
-
SHA1
41fc5a462f33fed61d65aaa221b036dc12468f05
-
SHA256
b0c14e85fb6423ea7bf551d3801014f63a29bcc0092db60b47e94058d5bfdb3a
-
SHA512
91d773e06559d7a4b59b0b4d0ed9c515fc5893f529dd54c86eec0844ae118e026c18af1f8b8cbde23c818007c77daaba770a03622a1680485c4817e255fef5ae
-
SSDEEP
1536:7BC2jtfP8iXTRETRFnCnU6GOVkfIA1SyYLRsdmJXXiqNk+85+8dcZ/cCM:t9F/X2HCnU6+1SyZOiqH8M8+W
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b0c14e85fb6423ea7bf551d3801014f63a29bcc0092db60b47e94058d5bfdb3a.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE