Behavioral task
behavioral1
Sample
539b49923fb1f392e646ad70e36c020c660fa88b755fc0086c82ac66ead5b2df.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
539b49923fb1f392e646ad70e36c020c660fa88b755fc0086c82ac66ead5b2df.exe
Resource
win10v2004-20220901-en
General
-
Target
539b49923fb1f392e646ad70e36c020c660fa88b755fc0086c82ac66ead5b2df
-
Size
407KB
-
MD5
06d839c55c8e15d1d6f30fe8f333d010
-
SHA1
995df41e3ae1cd3500db58befd570b2b7aca0221
-
SHA256
539b49923fb1f392e646ad70e36c020c660fa88b755fc0086c82ac66ead5b2df
-
SHA512
8e5774fe5e1262403dd6846523379b333e89b63914f0a9c81157656c98f47d66b1da3c9974e1dfd0049d11fd68828adf297787736d76ce86f626dd125c0b3dfd
-
SSDEEP
6144:FkUW4PFUxkfsWYUc3wWtY4I4vTIZ6z37YyQYxuY+1bDGL6S4WiU16CQp:CyK+Ro3wWtXI4vTjMyQ3Y+Q6pWiU16p
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
539b49923fb1f392e646ad70e36c020c660fa88b755fc0086c82ac66ead5b2df.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 339KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ZC Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE