Behavioral task
behavioral1
Sample
b349de10544ce248b23cf4a8525d7c1b0e0c5e50a7bd7714c6d78a70a606cf36.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b349de10544ce248b23cf4a8525d7c1b0e0c5e50a7bd7714c6d78a70a606cf36.exe
Resource
win10v2004-20220901-en
General
-
Target
b349de10544ce248b23cf4a8525d7c1b0e0c5e50a7bd7714c6d78a70a606cf36
-
Size
456KB
-
MD5
178e515fa916568ac2d0a5aae33ffe08
-
SHA1
b1496a906ac8676149a163b33efa9293260b61b2
-
SHA256
b349de10544ce248b23cf4a8525d7c1b0e0c5e50a7bd7714c6d78a70a606cf36
-
SHA512
421750f9f04bbc5bb52b669b53f53b810422d056652f028cf1c4263cd53a0e52785e318f0e3e419da34929ffc4f3d3701887c998737de872bdcb8c86876c458b
-
SSDEEP
3072:Oti2qcZx6D1C4b0LJcXUflRxyC6zwvCLwW2k/S8JYV8eqzDj0bxbjnggzonw/wgE:OQdSoqyK8ezfggWBgY1bXwfTiw6CS1
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b349de10544ce248b23cf4a8525d7c1b0e0c5e50a7bd7714c6d78a70a606cf36.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 300KB - Virtual size: 300KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE