Behavioral task
behavioral1
Sample
b5a66c32300ec7ee9bf24c6b5e09ddec7df6cfed6b0108c4d09ce9ef43366761.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b5a66c32300ec7ee9bf24c6b5e09ddec7df6cfed6b0108c4d09ce9ef43366761.exe
Resource
win10v2004-20221111-en
General
-
Target
b5a66c32300ec7ee9bf24c6b5e09ddec7df6cfed6b0108c4d09ce9ef43366761
-
Size
247KB
-
MD5
41a410d26433a45c8ebaf7bd181f1575
-
SHA1
a12ece4fde14e68d992563b36a4dff7493d525fb
-
SHA256
b5a66c32300ec7ee9bf24c6b5e09ddec7df6cfed6b0108c4d09ce9ef43366761
-
SHA512
959372194e2181ff900ed140be8f7727a052057001abe3e81098388635783773364534c508b4e262945c70990fb09be745f3d7573305434d15035e6d80852cfb
-
SSDEEP
6144:h0+UwqSOqTPBRmqEhOBPrHyEPsTUESucWYF:h0/wqHqTPBRXcGEos
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b5a66c32300ec7ee9bf24c6b5e09ddec7df6cfed6b0108c4d09ce9ef43366761.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 87KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE