Behavioral task
behavioral1
Sample
b8b211c697116c511fd6231b1c3b6aafe48bb0cb9a0527ae05443c1a76e2fd4b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b8b211c697116c511fd6231b1c3b6aafe48bb0cb9a0527ae05443c1a76e2fd4b.exe
Resource
win10v2004-20220901-en
General
-
Target
b8b211c697116c511fd6231b1c3b6aafe48bb0cb9a0527ae05443c1a76e2fd4b
-
Size
81KB
-
MD5
db94f3b908ec355a4da87d5641af7443
-
SHA1
e8aa281da27e11125b4fe32d48b65a8d9c5899c0
-
SHA256
b8b211c697116c511fd6231b1c3b6aafe48bb0cb9a0527ae05443c1a76e2fd4b
-
SHA512
9bb8dbd000ea03b7323bc14e1ef270ee54b24f56cf8ee145def30413c38c336eb2e32c36dfdfead60d03d05abacdbec06c59c9bacaae1a3b16ed7ebaccc65900
-
SSDEEP
1536:P1A+tVxxxpvsknl+/4zG4UYPcKxsmwpEBCw36S4W0X:d//xxpvll+/4yFNKxfVBj36S4Wi
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b8b211c697116c511fd6231b1c3b6aafe48bb0cb9a0527ae05443c1a76e2fd4b.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE