Behavioral task
behavioral1
Sample
ba3fdd19ea06e216d8968b282bbe3859a6c4c4a2d4ca6321e5fe251b64ca589a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ba3fdd19ea06e216d8968b282bbe3859a6c4c4a2d4ca6321e5fe251b64ca589a.exe
Resource
win10v2004-20220901-en
General
-
Target
ba3fdd19ea06e216d8968b282bbe3859a6c4c4a2d4ca6321e5fe251b64ca589a
-
Size
347KB
-
MD5
9692ddfb0b973488cfac8ae614df703d
-
SHA1
9718f1b3e5ec04d3927b52fd013a15dbdf92d00b
-
SHA256
ba3fdd19ea06e216d8968b282bbe3859a6c4c4a2d4ca6321e5fe251b64ca589a
-
SHA512
a0c468a1bec456cc565d68f79c0e46418432ee0e19bdea3d2ffa8d60a38458ffc4ba9704a1ecb6bab13e3951746fb1b3ce176d8ce35b01830424e00910a92c9f
-
SSDEEP
6144:Ij9HNUHKM4ex+2LQKHKtc0gsvy3tWM8N9:Ij9tExx+2LKzvy3tWM8N9
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ba3fdd19ea06e216d8968b282bbe3859a6c4c4a2d4ca6321e5fe251b64ca589a.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE