Behavioral task
behavioral1
Sample
4add95e12d15a872bf61105c72957146837ac3aa3d46fc322c18e549fa5ba3e1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4add95e12d15a872bf61105c72957146837ac3aa3d46fc322c18e549fa5ba3e1.exe
Resource
win10v2004-20220812-en
General
-
Target
4add95e12d15a872bf61105c72957146837ac3aa3d46fc322c18e549fa5ba3e1
-
Size
43KB
-
MD5
2dd189fa715fe0028ffb68cdde2467bc
-
SHA1
7ecd4f2428b534802deec34e9baf20f4811d7b89
-
SHA256
4add95e12d15a872bf61105c72957146837ac3aa3d46fc322c18e549fa5ba3e1
-
SHA512
9454b678d74a55f419ca702311f8186b6b088e119a3444c26efcdf1652ba307f9526befb7c1eb23adf0fdbd7d0c5fb1b8e9e9c35212cd0330f8e7ac017c95653
-
SSDEEP
768:6yY8xeFWTk1cax2Htqh/xozcoRMSNAcUd1RvT:60c8w1cA2Hsh8RMSsXRvT
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
4add95e12d15a872bf61105c72957146837ac3aa3d46fc322c18e549fa5ba3e1.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE