Behavioral task
behavioral1
Sample
4236b304997ba229b9cd2da078a96f92a0f26f5507f258566ebb3eb84f3d93f1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4236b304997ba229b9cd2da078a96f92a0f26f5507f258566ebb3eb84f3d93f1.exe
Resource
win10v2004-20220812-en
General
-
Target
4236b304997ba229b9cd2da078a96f92a0f26f5507f258566ebb3eb84f3d93f1
-
Size
306KB
-
MD5
0e8cfc0448f512181f705ade0bbeb1b9
-
SHA1
7249bca4894a8ca8ca9df2358092f33c70d8dd8e
-
SHA256
4236b304997ba229b9cd2da078a96f92a0f26f5507f258566ebb3eb84f3d93f1
-
SHA512
8acd41fb6919ad425703ce67ea7bee7dbf4b2ee722f515a20d18743518334583b2fd24e009bcf6d04c9fa62f8f4bd855972f955b4d696649bc380d1a9667d89d
-
SSDEEP
6144:xfNdLF0ocp0dyd+97C6H8nnMHPer11XgUfcgxFomgXHsMjoS3:xFdLF9S0deQJ8n7RkgxFZgXxoS3
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
4236b304997ba229b9cd2da078a96f92a0f26f5507f258566ebb3eb84f3d93f1.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 302KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE