Behavioral task
behavioral1
Sample
4eb78492affd589f8fd5a51287c8514e7bd3193b4ec798cdde4a13fa6b065b59.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4eb78492affd589f8fd5a51287c8514e7bd3193b4ec798cdde4a13fa6b065b59.exe
Resource
win10v2004-20220901-en
General
-
Target
4eb78492affd589f8fd5a51287c8514e7bd3193b4ec798cdde4a13fa6b065b59
-
Size
351KB
-
MD5
81a5162244d8e5abd8ea78018d70a4fe
-
SHA1
2d56802c53c8f10dae6b9b039ab46c224f61507b
-
SHA256
4eb78492affd589f8fd5a51287c8514e7bd3193b4ec798cdde4a13fa6b065b59
-
SHA512
4284c96fd5a88a1de1299f943f235975b1df741c1f77f625dffd89662e10066c2bd78e8f767bfa8b78f1d91c5360ee1158cb1f62c430b1654066fd9b71d80125
-
SSDEEP
3072:BqRAFgKD5iLDeZl/AtADljPzXbMrawgkeAubbixuB2MiOQHQRvOxop0o:BqKgmwfeZlVt7graw1uKoQwUn
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
4eb78492affd589f8fd5a51287c8514e7bd3193b4ec798cdde4a13fa6b065b59.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 212KB - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 136KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ