Behavioral task
behavioral1
Sample
d48540d235c1df47abd469b3867ce40a89fd4f20a7e72350f8ac05d4d0036b24.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d48540d235c1df47abd469b3867ce40a89fd4f20a7e72350f8ac05d4d0036b24.exe
Resource
win10v2004-20220812-en
General
-
Target
d48540d235c1df47abd469b3867ce40a89fd4f20a7e72350f8ac05d4d0036b24
-
Size
282KB
-
MD5
a5049b388d0521a03a1e5cecff3fdd8b
-
SHA1
866998f7ad1386d4eb0c1350cb3e1c7bbd4c396c
-
SHA256
d48540d235c1df47abd469b3867ce40a89fd4f20a7e72350f8ac05d4d0036b24
-
SHA512
996353f60bb22ae1cf6d0770c73587668dd4f3e1ac06aed3815aa93348d0671dc9d9ec8faec42b6e6f94ecb2f383736c9ccb4002bdd1f0e700de126e50887032
-
SSDEEP
3072:Ki8tyQECEAwX38kysVE8D0aAfyLn37Y9LruYVIILwbiPTUk6xfVzdH:KkQEQawsVE84yj37y8juqNL
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
d48540d235c1df47abd469b3867ce40a89fd4f20a7e72350f8ac05d4d0036b24.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE