Behavioral task
behavioral1
Sample
b4266836e82cc08e5489d49ec514be51e08e29d5dbc3b6b4b6b13eeb33260b8a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b4266836e82cc08e5489d49ec514be51e08e29d5dbc3b6b4b6b13eeb33260b8a.exe
Resource
win10v2004-20220901-en
General
-
Target
b4266836e82cc08e5489d49ec514be51e08e29d5dbc3b6b4b6b13eeb33260b8a
-
Size
607KB
-
MD5
310e1f556db033c4e191f887e69f1d81
-
SHA1
4330908430a2f6f6304e989a08cd6c145b8a75d2
-
SHA256
b4266836e82cc08e5489d49ec514be51e08e29d5dbc3b6b4b6b13eeb33260b8a
-
SHA512
62b09d0cbeacf68482a84b458957d37eb9a7d8e2c2f8bce92f94785df9e553b9559cf6ae1eea1dd2bb2fd938c4dd564e4d23e701f892ed5546834f5ffb80bb2c
-
SSDEEP
12288:4FGv69InNqAZkPVXtO08H6EmQcp3XoSH1tZU4P2vr:MGi90qeYO00E3/U4+r
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b4266836e82cc08e5489d49ec514be51e08e29d5dbc3b6b4b6b13eeb33260b8a.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 277KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 123KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE