Behavioral task
behavioral1
Sample
b4ab48fa3383e050fee1db3dbc4c7ebd8b8985b08340787941645737cb7411ed.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b4ab48fa3383e050fee1db3dbc4c7ebd8b8985b08340787941645737cb7411ed.exe
Resource
win10v2004-20220812-en
General
-
Target
b4ab48fa3383e050fee1db3dbc4c7ebd8b8985b08340787941645737cb7411ed
-
Size
501KB
-
MD5
6543832c1721971dbc051fafdbcecb74
-
SHA1
5cc4112c620ebc365dc4c0cf82639860948c5930
-
SHA256
b4ab48fa3383e050fee1db3dbc4c7ebd8b8985b08340787941645737cb7411ed
-
SHA512
89d2686a8b7166ed1e67c57500d37a84b4b1e6f689090b9afc1584787163ea1872fd67432ec881bac6a0fbf8f20e23b976241d6332aff908fc904de7edf67aa0
-
SSDEEP
6144:y8lLSeKLxjiZjdhTv2tIyzJM/FAvzBF/nM+BNlocz4xWadXmRd7gJQa3:ymFT1yNM/Wvz/Z4WaSdUJP
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b4ab48fa3383e050fee1db3dbc4c7ebd8b8985b08340787941645737cb7411ed.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 288KB - Virtual size: 288KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 210KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE