Behavioral task
behavioral1
Sample
b0eb726cecfeaad8c3dd05987d948c7353c92b1a2e08350cda3eba3ccf64923c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b0eb726cecfeaad8c3dd05987d948c7353c92b1a2e08350cda3eba3ccf64923c.exe
Resource
win10v2004-20220812-en
General
-
Target
b0eb726cecfeaad8c3dd05987d948c7353c92b1a2e08350cda3eba3ccf64923c
-
Size
293KB
-
MD5
e3d289511605d6d763472884db5b1d65
-
SHA1
84cbc9ff2f6fd47dacc6b80371a53bd8ed9b34d1
-
SHA256
b0eb726cecfeaad8c3dd05987d948c7353c92b1a2e08350cda3eba3ccf64923c
-
SHA512
af0a3062d99cb33f61c6580d70c533dc4f726defe43ca5c6e06f4a6ca339686b9f88c6cc18277d28d289d6e84f7cc4aa50ed92edb678bd8222319c95c4449d0f
-
SSDEEP
6144:vduErzXXu7HPBL9RerzmmvqvxvxvKvLvwvtvHvt4j:NXUHl/S1
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b0eb726cecfeaad8c3dd05987d948c7353c92b1a2e08350cda3eba3ccf64923c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE