Behavioral task
behavioral1
Sample
4a56768f00e15b5048424aa2140ae52085ddaf7ddee536ce9b86da68e7e6a6f9.exe
Resource
win7-20220901-en
General
-
Target
4a56768f00e15b5048424aa2140ae52085ddaf7ddee536ce9b86da68e7e6a6f9
-
Size
152KB
-
MD5
a2540a81ced7f00a44cbf2fe46df4a60
-
SHA1
8a4ae59723d7a1dae52508092799fc8276a617b0
-
SHA256
4a56768f00e15b5048424aa2140ae52085ddaf7ddee536ce9b86da68e7e6a6f9
-
SHA512
34299aa37487634b2be10c3ee90726d7675bc64becad733d401988d3257b71a16474dfbe58df5a7629ba3844c7e7277d8be9a01505bdd55bae27a2ede1d5f364
-
SSDEEP
3072:hZzIQZk9fN8RjurfgV9l4WinM59eT0AY/iFT:hZkykQRjhVTkM5d/iF
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
4a56768f00e15b5048424aa2140ae52085ddaf7ddee536ce9b86da68e7e6a6f9.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 176KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 95KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cjmcqbp Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE