Behavioral task
behavioral1
Sample
4f5946b8396617ef42f7660cc4a33014829a0f88403e16530c5cf4f9cabc4e9d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4f5946b8396617ef42f7660cc4a33014829a0f88403e16530c5cf4f9cabc4e9d.exe
Resource
win10v2004-20220812-en
General
-
Target
4f5946b8396617ef42f7660cc4a33014829a0f88403e16530c5cf4f9cabc4e9d
-
Size
114KB
-
MD5
f95e5a65fa56b5cbe6d68073b2726dca
-
SHA1
2d446da8e383d11142040d0f8894e7574f26c2f2
-
SHA256
4f5946b8396617ef42f7660cc4a33014829a0f88403e16530c5cf4f9cabc4e9d
-
SHA512
3d2ae73c02f1bc47c03ebf4ad1500738b27b1229b8f8de301f96ab0a289756b3c3ba9c60af08397c132a6d1f833a70c2ce4348bdf7cac4252c7d37e400666240
-
SSDEEP
3072:+t9izXjZqKehMDPfGzOKmNAthKFNHmJbU2out4:+t92X9qKeYHGMNAyFeU2oS4
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
4f5946b8396617ef42f7660cc4a33014829a0f88403e16530c5cf4f9cabc4e9d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 116KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 113KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE