Behavioral task
behavioral1
Sample
bf6ee441096288544f89b15633e4b6e5996c30985aabd21fb350e88aa49ca29e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bf6ee441096288544f89b15633e4b6e5996c30985aabd21fb350e88aa49ca29e.exe
Resource
win10v2004-20221111-en
General
-
Target
bf6ee441096288544f89b15633e4b6e5996c30985aabd21fb350e88aa49ca29e
-
Size
222KB
-
MD5
a18aee0b1ccb9a102923b32332b38875
-
SHA1
8477b10f72d475ce22f1d4b9827180caa9dc6f20
-
SHA256
bf6ee441096288544f89b15633e4b6e5996c30985aabd21fb350e88aa49ca29e
-
SHA512
5b4c83a6a7f80414180629d26fd10526da2a599f87cbd597583c2b5f8149ce080e4ed8871e6d1de9df251a3d65ddd906c019c071e80cbf5f00e2740bc4a69651
-
SSDEEP
6144:fjgMS6oUzZhSnNbGi/hYx+Vc3NbBO3Slee:UMoULSRGi/WBO0
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
bf6ee441096288544f89b15633e4b6e5996c30985aabd21fb350e88aa49ca29e.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 138KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE