Behavioral task
behavioral1
Sample
4a9b8241938c26997982e1705f04bcb87151ef312fdb27638611bf765654e3e4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4a9b8241938c26997982e1705f04bcb87151ef312fdb27638611bf765654e3e4.exe
Resource
win10v2004-20220812-en
General
-
Target
4a9b8241938c26997982e1705f04bcb87151ef312fdb27638611bf765654e3e4
-
Size
50KB
-
MD5
14de767110fc1e34724df9d22d8ae548
-
SHA1
f46a496de0787862cae479fa986fc14e568d1d2c
-
SHA256
4a9b8241938c26997982e1705f04bcb87151ef312fdb27638611bf765654e3e4
-
SHA512
3853f61bcc9153a4cf330d5720c368357aa132e2f4e3a55b2ce2ee73c40c7ed804d64a7cb5caec96888f926b756a2f978e6d07d2eb233daf220bd044329181af
-
SSDEEP
768:CA+ebrPhQ7WcdcXa2jFkbb4vS0TxRGAa3KZZIJOpgVThY9Q8pUY:CA+2mzdcXa2j2eZjZZG1a7
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
4a9b8241938c26997982e1705f04bcb87151ef312fdb27638611bf765654e3e4.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE