Behavioral task
behavioral1
Sample
4da26d588a9133c1d471be4bc030d8502b0d560d1ec5e213dc19ea830e528dc7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4da26d588a9133c1d471be4bc030d8502b0d560d1ec5e213dc19ea830e528dc7.exe
Resource
win10v2004-20220901-en
General
-
Target
4da26d588a9133c1d471be4bc030d8502b0d560d1ec5e213dc19ea830e528dc7
-
Size
64KB
-
MD5
2011bf60542b8b6b793ad0d85faaa77a
-
SHA1
c51a59cb3de7feed778f420fb0d9939fff82c1f9
-
SHA256
4da26d588a9133c1d471be4bc030d8502b0d560d1ec5e213dc19ea830e528dc7
-
SHA512
e21c637a546de69ad0a288ceab4a3b76eec7ec838169d0a314b901d0127978f471c0aff25d3a92e084deebb804b59b164508e6ee3712bac411bbe36fe568e40f
-
SSDEEP
1536:oT3NKNkN9pK5vLKUGhGhLulcHhmnhdPLtpKmAp:s9KNe985noGhLuuH0nzBoh
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
4da26d588a9133c1d471be4bc030d8502b0d560d1ec5e213dc19ea830e528dc7.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.src Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE