Behavioral task
behavioral1
Sample
b3a6b82014bd56a4c485a54812878df156c67673e1047be5ddd507f4ed7e634e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b3a6b82014bd56a4c485a54812878df156c67673e1047be5ddd507f4ed7e634e.exe
Resource
win10v2004-20220812-en
General
-
Target
b3a6b82014bd56a4c485a54812878df156c67673e1047be5ddd507f4ed7e634e
-
Size
130KB
-
MD5
ff41fd594fe2a46a6f8bfe9c921b02e4
-
SHA1
3f94f79dc8d4e5ec77b928b262f300786db40a09
-
SHA256
b3a6b82014bd56a4c485a54812878df156c67673e1047be5ddd507f4ed7e634e
-
SHA512
fe787f2300163f9804c6667cd763b8ea36c49ec1dd4c754d9463057c78d92136263b7a9deae8770fa1fe985450804a67483bbb85f0915438c4096328f37c9255
-
SSDEEP
3072:/LPbbiGjwHw2/j6w7XFrzafSm/snRJpU+HIm7I300:njw1/j6WXl6SmsJpl7V
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b3a6b82014bd56a4c485a54812878df156c67673e1047be5ddd507f4ed7e634e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bfwunuj Size: 4KB - Virtual size: 80KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE