Behavioral task
behavioral1
Sample
4361188965.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4361188965.exe
Resource
win10v2004-20220812-en
General
-
Target
4361188965.exe
-
Size
68.9MB
-
MD5
70371ce3f367ea9b4824b7c35ea537a9
-
SHA1
d11654f089170800a835493809db93f54b9a1e43
-
SHA256
94c4096d21e06756a79012e5fe5430e71d59e9d33e50f5b567e9ec60394245c9
-
SHA512
f47c6ac6169dbc2889d00b2ce8291e3f3b82396c5bb2bf7b731ee2ee7fa2676c8844fd2b247eeb20ce89f60de87a5fa10985968fa8689120f6a3acea2d7f70ba
-
SSDEEP
1572864:462x06IQ1a9WvfL5Xrg5AnFIWjOItx0uufK5E5b:462xhvu9
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
4361188965.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 32KB - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE