Behavioral task
behavioral1
Sample
c439216d8fab9788ccd18acf682da0a6298f34cc18e3ab06ef1e9a3688c11a38.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c439216d8fab9788ccd18acf682da0a6298f34cc18e3ab06ef1e9a3688c11a38.exe
Resource
win10v2004-20220901-en
General
-
Target
c439216d8fab9788ccd18acf682da0a6298f34cc18e3ab06ef1e9a3688c11a38
-
Size
76KB
-
MD5
7a75e9ee1fee25de15030bfc81d664b7
-
SHA1
386d30d9dbbc5676e55bf99969ae26dfcab956c9
-
SHA256
c439216d8fab9788ccd18acf682da0a6298f34cc18e3ab06ef1e9a3688c11a38
-
SHA512
43acf8fea8c42c85f3556444854ed3c46b2b85ef7287e95ab0abc576a215334b8a75e81b923544c8817a94c331d89da867b19ba40356305d2b1a781f6583e907
-
SSDEEP
1536:fJ/+RZRcNMqqU+NV23S2U1hrNG6pEnP2n9f:5YZRqMqqDLy/U3rNG6p62nR
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
c439216d8fab9788ccd18acf682da0a6298f34cc18e3ab06ef1e9a3688c11a38.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE