Behavioral task
behavioral1
Sample
ab4c58b4d40e531d605aa578d9187110591e9b5b3a423877498149f62b3d00c2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ab4c58b4d40e531d605aa578d9187110591e9b5b3a423877498149f62b3d00c2.exe
Resource
win10v2004-20220812-en
General
-
Target
ab4c58b4d40e531d605aa578d9187110591e9b5b3a423877498149f62b3d00c2
-
Size
221KB
-
MD5
19b5c2e63203bd86be9a6e0f3ddf57c6
-
SHA1
31e4d952234ef8a61c23976b5b0f1615f810d030
-
SHA256
ab4c58b4d40e531d605aa578d9187110591e9b5b3a423877498149f62b3d00c2
-
SHA512
2b6ae305911ca3e732d639302be7984cf2744a019a20c63146711de6f84335167f18db50b7d21ae95a922ba8b57dba3e64f2c638457f96cbff93f0709fe0aa37
-
SSDEEP
3072:yjW3sT1b/Hq4wplu5nakv/CLcUkxvz6c89fdcti5qTRzDO0j:bcT1ralkTUkR659fdc5T
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ab4c58b4d40e531d605aa578d9187110591e9b5b3a423877498149f62b3d00c2.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 130KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ