Behavioral task
behavioral1
Sample
046e7eddbe1a8a72e19f7888e8d7a8bf007be90c8b98f654b95d1c9402e588b4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
046e7eddbe1a8a72e19f7888e8d7a8bf007be90c8b98f654b95d1c9402e588b4.exe
Resource
win10v2004-20220812-en
General
-
Target
046e7eddbe1a8a72e19f7888e8d7a8bf007be90c8b98f654b95d1c9402e588b4
-
Size
2.1MB
-
MD5
a38a7ac3bdc8f471dfbe8655d3d9d6ad
-
SHA1
aabb9317a0d54fd7b58c354152eb8c0760529a9f
-
SHA256
046e7eddbe1a8a72e19f7888e8d7a8bf007be90c8b98f654b95d1c9402e588b4
-
SHA512
9dd7623a1951ba40d24e38c20c20228419f77e9a34e5c36e626ea9d358203bb7bb6cd15b5e0a6c4673ed9f30801f9ac35b29e4b15078e9743772972d27b7e4b9
-
SSDEEP
49152:Y1erQZbd22VsEhqCQDkYOMwwnMb4PmyVk+V8tgJd8rX:ZrQZZVsEh19YOXwnS4rVk+CgarX
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
046e7eddbe1a8a72e19f7888e8d7a8bf007be90c8b98f654b95d1c9402e588b4.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE