Behavioral task
behavioral1
Sample
ba362a8637a39d77f1ad04a49ec425fe9bad0ca5f2f7a28751e08c22dc8e336f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ba362a8637a39d77f1ad04a49ec425fe9bad0ca5f2f7a28751e08c22dc8e336f.exe
Resource
win10v2004-20221111-en
General
-
Target
ba362a8637a39d77f1ad04a49ec425fe9bad0ca5f2f7a28751e08c22dc8e336f
-
Size
169KB
-
MD5
1eb050abe7eab9c7d3ed68cf01c972a4
-
SHA1
da1db2508f8078977c4a0a321817a14b3144bd6c
-
SHA256
ba362a8637a39d77f1ad04a49ec425fe9bad0ca5f2f7a28751e08c22dc8e336f
-
SHA512
658e6c23cb80f8ca4bafc9ae3ffb4fb36835640a5017f4e6b109d6f4dfaeb76ed3d0c3fdab7f6b4634829b639443c1ac512852a4fc6e2110e66d2535c53961dc
-
SSDEEP
3072:e8a0eenrgcZLOJk6NSQlF2PjFe1tGxg6tUfCnLGFhzANCMoutN:eT0eennLOxlSJe1SSwMhTMoSN
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ba362a8637a39d77f1ad04a49ec425fe9bad0ca5f2f7a28751e08c22dc8e336f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 160KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE