Behavioral task
behavioral1
Sample
3979e49945255b6b35d67b73d97c0d2ca0e2a8748dbc192adc92431aaf22c64f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3979e49945255b6b35d67b73d97c0d2ca0e2a8748dbc192adc92431aaf22c64f.exe
Resource
win10v2004-20220901-en
General
-
Target
3979e49945255b6b35d67b73d97c0d2ca0e2a8748dbc192adc92431aaf22c64f
-
Size
189KB
-
MD5
c727257b73e743a3b8fbb32a11c274b0
-
SHA1
4e0a0a604f765da890f18686cd2aab597f568d67
-
SHA256
3979e49945255b6b35d67b73d97c0d2ca0e2a8748dbc192adc92431aaf22c64f
-
SHA512
5caaec8f1802ff28664088d78b16a8072ebc36ae0bcfd0920ceafc8c0c8fb7afa41fa561ebcfc7dea02a7c28283b6a8fd5d1a617670fefd592c76c658a8ac0b6
-
SSDEEP
3072:tHPxTqpdA3f6QNf2IPO4DpmWpAsfYbTOBoefYi6a9k20tA3ZPkz13L5ctviOne51:t52pdqfv2IPOGfXf5ovWJy136YKeD
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
3979e49945255b6b35d67b73d97c0d2ca0e2a8748dbc192adc92431aaf22c64f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pb Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE