Behavioral task
behavioral1
Sample
b1ebb337b6c5d930becb621f9ff07ba7cd51b11da95079d8980d76a5fce821e5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b1ebb337b6c5d930becb621f9ff07ba7cd51b11da95079d8980d76a5fce821e5.exe
Resource
win10v2004-20221111-en
General
-
Target
b1ebb337b6c5d930becb621f9ff07ba7cd51b11da95079d8980d76a5fce821e5
-
Size
215KB
-
MD5
64bd2c3f27f3bc136b11a649b8dbb94e
-
SHA1
4f0c7adc07ce258aac6becc861e3cedfc624e44c
-
SHA256
b1ebb337b6c5d930becb621f9ff07ba7cd51b11da95079d8980d76a5fce821e5
-
SHA512
d9919cb8aa5395bedc5b08cad530b83e939ea750e5ebaf8005a38ea99b404feedb0b3ed7f5b1468392f6b0e3d5f65f5d9a9c48d277c9b821d9fe1d9b512d7897
-
SSDEEP
6144:eZC4d3lbxc6wU/UP+XhdMRFD3LAwekb8+SRtoScr:H4dMRU/UP4heFjLDF4+SjoScr
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b1ebb337b6c5d930becb621f9ff07ba7cd51b11da95079d8980d76a5fce821e5.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE