Behavioral task
behavioral1
Sample
b8c4439cb71f27377eba9f19412ea9de7b84e7475b58c1615608052ce1ed1c28.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b8c4439cb71f27377eba9f19412ea9de7b84e7475b58c1615608052ce1ed1c28.exe
Resource
win10v2004-20220812-en
General
-
Target
b8c4439cb71f27377eba9f19412ea9de7b84e7475b58c1615608052ce1ed1c28
-
Size
532KB
-
MD5
478541dfae0cc9db5c7d93a70d78128c
-
SHA1
b20845513cc6f30b5ed8d675dcc71099155cf3a9
-
SHA256
b8c4439cb71f27377eba9f19412ea9de7b84e7475b58c1615608052ce1ed1c28
-
SHA512
031e14242752ae5a9f4ccee6d07a0dc9c9e9b958e7c1342f5a8313dd2db13e9abc6a4ce349fceeb07ac0984798ee1a2caab1c4895c816ff399cdc077e746d831
-
SSDEEP
6144:OJjrCC7n4zkgmK1vI+m8HxSCX5hHis70EXiC:ks7I+JTHnbyC
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b8c4439cb71f27377eba9f19412ea9de7b84e7475b58c1615608052ce1ed1c28.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newIID Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.NewIID Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newIID Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE