Behavioral task
behavioral1
Sample
4cfded725b8728e62ea438a1e745596dfd59a2775af2dcd4ab965a4a98dbef3e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4cfded725b8728e62ea438a1e745596dfd59a2775af2dcd4ab965a4a98dbef3e.exe
Resource
win10v2004-20220812-en
General
-
Target
4cfded725b8728e62ea438a1e745596dfd59a2775af2dcd4ab965a4a98dbef3e
-
Size
160KB
-
MD5
a0c595969d844519415b933a9b0f4e00
-
SHA1
9284ec04fee8e6f29819747ec43d9ac852d67601
-
SHA256
4cfded725b8728e62ea438a1e745596dfd59a2775af2dcd4ab965a4a98dbef3e
-
SHA512
3d36178105993d37e833fa3ba37eefb5300b4aab47ecef09fd10e2d93a07bc187e1c1beff4e33e9dfa252d9d1dcc502e9f5326bd5ff9774069212ef6e5242595
-
SSDEEP
3072:yxTqpdA3f6QNf2IPO4DpmWpAsfYbTOBoefYi6a9k20tAvnkzkuIb+:02pdqfv2IPOGfXf5ovWvakz+
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
4cfded725b8728e62ea438a1e745596dfd59a2775af2dcd4ab965a4a98dbef3e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE