Behavioral task
behavioral1
Sample
4079bd643e7c59918c642b8fa0be00d22887f58d9f9f8ac5667cb8640a35c5e0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4079bd643e7c59918c642b8fa0be00d22887f58d9f9f8ac5667cb8640a35c5e0.exe
Resource
win10v2004-20220812-en
General
-
Target
4079bd643e7c59918c642b8fa0be00d22887f58d9f9f8ac5667cb8640a35c5e0
-
Size
640KB
-
MD5
0148ea644c3b98b2e35454e053cb60e3
-
SHA1
369287d67d1db79f444d30bd280efedb20078ac0
-
SHA256
4079bd643e7c59918c642b8fa0be00d22887f58d9f9f8ac5667cb8640a35c5e0
-
SHA512
8c4be608409090609fe25edff008e899c2a4d1074c7e174077e961743b98352475acced998454fb85f942ee330d38b36436f3bdd7d7625bd3917042e3d28955a
-
SSDEEP
12288:3ZWtI6Rk3eZJys73dOvXDpNjNe8LOVeZJys73dOvXDpNjNe87M4:3uha3eZJ8NI84eZJ8NI87M4
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
4079bd643e7c59918c642b8fa0be00d22887f58d9f9f8ac5667cb8640a35c5e0.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE