Behavioral task
behavioral1
Sample
42b1e1c64dc119306e6fd9bdae6c563b3dc33988b44d847e872a07ebdb8ffd77.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
42b1e1c64dc119306e6fd9bdae6c563b3dc33988b44d847e872a07ebdb8ffd77.exe
Resource
win10v2004-20220812-en
General
-
Target
42b1e1c64dc119306e6fd9bdae6c563b3dc33988b44d847e872a07ebdb8ffd77
-
Size
518KB
-
MD5
8196a7499c735315045daf0307108880
-
SHA1
39bc2cbc5761b0f8efc07badf1ef9ae5b7183c73
-
SHA256
42b1e1c64dc119306e6fd9bdae6c563b3dc33988b44d847e872a07ebdb8ffd77
-
SHA512
a57dd7b4a296b8eadced9701cf30549b5e20512877b8df6f0c0f9b955f54cac6e59d291ce59f27bdaeff367c913fd493ee9f53abb693c858655008faef5e39a1
-
SSDEEP
12288:rfDwpButU7Hxupe50UPtqzl+gs4qLh1PKkiOGyRUZzwSVI:7DwpButaczUPgAgFqLhROOPKGSVI
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
42b1e1c64dc119306e6fd9bdae6c563b3dc33988b44d847e872a07ebdb8ffd77.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 732KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 493KB - Virtual size: 496KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�}�a�u� Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE