Behavioral task
behavioral1
Sample
document.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
document.exe
Resource
win10v2004-20220812-en
General
-
Target
4702b44c2407f63c17d9aa4b938b45e6
-
Size
55KB
-
MD5
4702b44c2407f63c17d9aa4b938b45e6
-
SHA1
d8a5f19926747f0094f924619b52c49b64a7b24e
-
SHA256
91314b908fec475b58ce7df6a639db56c0b5ad407af7f3f0ead45b3665a65f32
-
SHA512
c40b3dcac1d4e0840b921206c7d7a8adf93e51de90859f94d99223e6e53cffc324645400bdb9174b5f38627ae9aa5317b5767a14519282dd3854a9dfbd452227
-
SSDEEP
768:SE/+UWAnnuOBRKfZviC/XgDM+BQ58w9O//S3riElNs8+GGR+jdbBczaz4qcfRPZd:RfndBRqvIRtw3ridHGGkBbjclUy
Malware Config
Signatures
-
resource yara_rule static1/unpack001/document.com upx
Files
-
4702b44c2407f63c17d9aa4b938b45e6.eml
-
document.com.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
email-plain-1.txt