Behavioral task
behavioral1
Sample
b10a04d9ea2bd6c7316395929ac53b800a7bd027e09be0be3deb6cee6e5d02dd.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b10a04d9ea2bd6c7316395929ac53b800a7bd027e09be0be3deb6cee6e5d02dd.exe
Resource
win10v2004-20220901-en
General
-
Target
b10a04d9ea2bd6c7316395929ac53b800a7bd027e09be0be3deb6cee6e5d02dd
-
Size
154KB
-
MD5
e4a772b75b468ebbd1c00267ef70b885
-
SHA1
50fe653b9f98f3a8f1f28adb8082f821bc419d7b
-
SHA256
b10a04d9ea2bd6c7316395929ac53b800a7bd027e09be0be3deb6cee6e5d02dd
-
SHA512
9e8132731902988298a2346417cb2e21d0f7404c9bc827079344d16dfbee550141b2fb7486558d282d18ff441d7dfbcd1cf0450abed5f20fab80f32414bbae50
-
SSDEEP
3072:pBcBuWAXJJ0W+KmdCxPD4t2r4H269kEztSzqN0eRe8qDYs:p6BBAZy7KeQb4gr4HP9zZPjwx
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b10a04d9ea2bd6c7316395929ac53b800a7bd027e09be0be3deb6cee6e5d02dd.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 256KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 147KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE