Behavioral task
behavioral1
Sample
4bf3054b39c872f5235299c5d8875af67028a8745dcf9d079c0d157e1c9b702f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4bf3054b39c872f5235299c5d8875af67028a8745dcf9d079c0d157e1c9b702f.exe
Resource
win10v2004-20220812-en
General
-
Target
4bf3054b39c872f5235299c5d8875af67028a8745dcf9d079c0d157e1c9b702f
-
Size
466KB
-
MD5
bc5617caf7b651267b48d95e7b9a3a5e
-
SHA1
16919946b739ff3205d4034b42c940ea59e68058
-
SHA256
4bf3054b39c872f5235299c5d8875af67028a8745dcf9d079c0d157e1c9b702f
-
SHA512
06d97083896b42ad7e1ed2485ebfb89b7e380f28ae59e093c6a7e5e0916f94c1ae976c75b712873c59699d468139b830bc4f35d0ecfb919bd5291fa8e0aca7e5
-
SSDEEP
6144:pB9oXI/MSg6XZ2c4pYZK0x1WmQS+5vV9vi/PQDt68A8JQwgqJk:p9/ng42c4pYZKm1WmQTVhuPG698zgIk
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
4bf3054b39c872f5235299c5d8875af67028a8745dcf9d079c0d157e1c9b702f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 296KB - Virtual size: 296KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 124KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE