Behavioral task
behavioral1
Sample
474d03dda820cf1d52c31db1cde154d68fe261172c49c65ec903bcef09c53a21.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
474d03dda820cf1d52c31db1cde154d68fe261172c49c65ec903bcef09c53a21.exe
Resource
win10v2004-20220901-en
General
-
Target
474d03dda820cf1d52c31db1cde154d68fe261172c49c65ec903bcef09c53a21
-
Size
335KB
-
MD5
4ef695dd761fe2e04b5fc2b3a0e2f790
-
SHA1
48f09eb1ab37e7ef2e0550687628f4e9eb745e1b
-
SHA256
474d03dda820cf1d52c31db1cde154d68fe261172c49c65ec903bcef09c53a21
-
SHA512
93dcbcfef400c29fded2439811c3417f919173c9bf8ef751f96b9972e76c26262e3eaf05a895d1c06aa7bd5e4101362c15cb0d23d6ce15c77562e7133ea36a51
-
SSDEEP
6144:d1wkbei/5GTJU4gY3LEuPU0D6O1m6VSjj1J:d+kbXkTJtQmYjz
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
474d03dda820cf1d52c31db1cde154d68fe261172c49c65ec903bcef09c53a21.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 219KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 114KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ygmxuws Size: - Virtual size:
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE