Behavioral task
behavioral1
Sample
1f4156ffc3eec76c59b4fbfe6a6beb360594cf7fce14ed3a4d9cc1e3881c547b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1f4156ffc3eec76c59b4fbfe6a6beb360594cf7fce14ed3a4d9cc1e3881c547b.exe
Resource
win10v2004-20220901-en
General
-
Target
1f4156ffc3eec76c59b4fbfe6a6beb360594cf7fce14ed3a4d9cc1e3881c547b
-
Size
2.0MB
-
MD5
a3859a5f21ec4524c752d122f51b4899
-
SHA1
b0df3333cf55111a7cd2c8addbbfb90a8fc0bbf7
-
SHA256
1f4156ffc3eec76c59b4fbfe6a6beb360594cf7fce14ed3a4d9cc1e3881c547b
-
SHA512
f196987864bbc55c32fc2c7d925f3a5b5fae2b76919210ecaadf86e8c1c58c649651a6804abbb80b5274c715d826a5a344ee56744f697f4754a8a2d1778d3ce1
-
SSDEEP
49152:VT4bhLKMVOekEhrgxyLJD1iNIEEV/l34Y+Cd6lbrls6a+kSmI8/Hoj:V2hLKZD2rmy517bV/KNu6sykSz8/W
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
1f4156ffc3eec76c59b4fbfe6a6beb360594cf7fce14ed3a4d9cc1e3881c547b.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 10.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 154KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.spm Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE