Behavioral task
behavioral1
Sample
b52654e159985ceaaa074908f805b8cd47f2c9ffb4c1c79a6bd48e54f9888b39.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b52654e159985ceaaa074908f805b8cd47f2c9ffb4c1c79a6bd48e54f9888b39.exe
Resource
win10v2004-20221111-en
General
-
Target
b52654e159985ceaaa074908f805b8cd47f2c9ffb4c1c79a6bd48e54f9888b39
-
Size
467KB
-
MD5
8ce4b271c7d29cb9aff643cb57c64311
-
SHA1
2c55c02e88ae20905b81867ab841a993f58d9579
-
SHA256
b52654e159985ceaaa074908f805b8cd47f2c9ffb4c1c79a6bd48e54f9888b39
-
SHA512
c688706f2ba62fd1cb272e0869b5d95691440f07fed95954f4fc9e42638f339d3566f929f4ca094f87ec8a4b62d8ba9b208df7fe604298de6e31c2ae631e6144
-
SSDEEP
12288:eFl08b3fuX2HszRwVqDZJG0SdWQPy8JXXtVvZ6fdeB8pDe4c:SzumHsdwVqVJHuWYtVvZ6fdiwKR
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b52654e159985ceaaa074908f805b8cd47f2c9ffb4c1c79a6bd48e54f9888b39.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 449KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hucrypt Size: 512B - Virtual size: 4KB