Behavioral task
behavioral1
Sample
b2a56f5cd403aa605e2219d2a354c6531ce9148cadabc31daff7f9077a43c85f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b2a56f5cd403aa605e2219d2a354c6531ce9148cadabc31daff7f9077a43c85f.exe
Resource
win10v2004-20221111-en
General
-
Target
b2a56f5cd403aa605e2219d2a354c6531ce9148cadabc31daff7f9077a43c85f
-
Size
888KB
-
MD5
4d8adb16a2bf8dd316316c6aec55e248
-
SHA1
9c30061532a11881e23e76c4d549416d9496ea8d
-
SHA256
b2a56f5cd403aa605e2219d2a354c6531ce9148cadabc31daff7f9077a43c85f
-
SHA512
e03a9910012da87f006526695083db0295dbb5d454fb0a819548c7698ee57a64b49ec7e2cbfaec3cf6d597255fdcc963f5eb8781a60bb1b07ada50fcbcdc97bd
-
SSDEEP
6144:7V0wElAtLGTMbpuurgqiOu2Dzk7G+KFciKMpcgDNoY1OBVGf+hN1UFpfNSED2aZ:75bqkuagqJ+KWcOgDN/1OBV
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b2a56f5cd403aa605e2219d2a354c6531ce9148cadabc31daff7f9077a43c85f.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 396KB - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 286KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 204KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE