Behavioral task
behavioral1
Sample
bf953ea3ec8ca3e20cc4710dd9338a4681a75143cbe91c84dc3881aae1e7fb08.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bf953ea3ec8ca3e20cc4710dd9338a4681a75143cbe91c84dc3881aae1e7fb08.exe
Resource
win10v2004-20220812-en
General
-
Target
bf953ea3ec8ca3e20cc4710dd9338a4681a75143cbe91c84dc3881aae1e7fb08
-
Size
8KB
-
MD5
efdb65b8096ad42744b78794939e4d61
-
SHA1
ff609db6491d528c52873e60fcc3dc66f4bf9496
-
SHA256
bf953ea3ec8ca3e20cc4710dd9338a4681a75143cbe91c84dc3881aae1e7fb08
-
SHA512
e0c72e17b5e24b6e12add50e8b708042058d00df960e1a6e071c80e1fd4ea19e4aa073bcf2159f7303838cacb23155c7f0fedeb76bcbab480e9b4143035cbb58
-
SSDEEP
192:9niwybyU0pu6WYdF2eJw/y91xR2U/Sr2qmXXREhA:VOIn/S/YH6RmnKA
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
bf953ea3ec8ca3e20cc4710dd9338a4681a75143cbe91c84dc3881aae1e7fb08.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RENOS Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE