Behavioral task
behavioral1
Sample
40839940c41d7f6817a2c485319521e22cf54c0fc9afe2de3bf1afa8201d5107.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
40839940c41d7f6817a2c485319521e22cf54c0fc9afe2de3bf1afa8201d5107.exe
Resource
win10v2004-20220812-en
General
-
Target
40839940c41d7f6817a2c485319521e22cf54c0fc9afe2de3bf1afa8201d5107
-
Size
342KB
-
MD5
a1a6a6e1b62b99365d8ea4db957692b6
-
SHA1
2bc8a873270bea2e1a6063689aeec1a2fac6d13b
-
SHA256
40839940c41d7f6817a2c485319521e22cf54c0fc9afe2de3bf1afa8201d5107
-
SHA512
ebd0e9e1aa811bdff48b8ded618003f674cac09af02917520d9a276193296395fdbf1303c63771705efc3e28771bce6394c701062b07fd25530ee6686260cc59
-
SSDEEP
6144:cRqmpp+amNOGokzLyM9tsLAitQo6tzOKkzIt8gKyfjxfR9D2j4yNR:4qmpplpGoGL3etQoMiXM8gxf/Sj4yNR
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
40839940c41d7f6817a2c485319521e22cf54c0fc9afe2de3bf1afa8201d5107.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 338KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE