Behavioral task
behavioral1
Sample
4908acb85c1a36c04ba8b1a80bb5516292aec827fe1a206ae391f925adfab5f2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4908acb85c1a36c04ba8b1a80bb5516292aec827fe1a206ae391f925adfab5f2.exe
Resource
win10v2004-20220812-en
General
-
Target
4908acb85c1a36c04ba8b1a80bb5516292aec827fe1a206ae391f925adfab5f2
-
Size
140KB
-
MD5
4dea029ec81aaf74e01ac74e8d7992f0
-
SHA1
2d4372af94e37abb87bbf16ce69eaabcdb5e5f2e
-
SHA256
4908acb85c1a36c04ba8b1a80bb5516292aec827fe1a206ae391f925adfab5f2
-
SHA512
b2066b4c160db9f425c215afb330d76ccd97a61da16460378efa03f4e33b5ab8e5523884330f7e58002025724d7eb0cc5bd482b061e55e5228436de974f656cf
-
SSDEEP
3072:FfSZd0oxFkNgyk5jW12gqRNSDADeak7dJHB/AE:UfxFkqV7NSsQLH5AE
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
4908acb85c1a36c04ba8b1a80bb5516292aec827fe1a206ae391f925adfab5f2.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 832KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE