Behavioral task
behavioral1
Sample
4b71467210277e64e4ac8b28b4845e2294e641caa42ecc36b49fc6b2f28051ed.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4b71467210277e64e4ac8b28b4845e2294e641caa42ecc36b49fc6b2f28051ed.exe
Resource
win10v2004-20220812-en
General
-
Target
4b71467210277e64e4ac8b28b4845e2294e641caa42ecc36b49fc6b2f28051ed
-
Size
635KB
-
MD5
0e61dbecbb15b47f6adab6eb3d82782b
-
SHA1
d342a1e5dfe401fbe92747938c2a0de68d1eef12
-
SHA256
4b71467210277e64e4ac8b28b4845e2294e641caa42ecc36b49fc6b2f28051ed
-
SHA512
4f47a1280de69b1db7bb2ca24dd9f1ecb3cf758c2ae31753faa52aa5eb610c8fe0074f1bc2b4a0a4a7a53a4f95da9ff8216f4e452dc1baf91aa778bc808ba06d
-
SSDEEP
6144:GWZfec9EbXDk6RkQKjBXrG1VVE+IsrG1VVE+IfV8Hw3e/LuHODB3rG1VVE+IsrGu:3ZWtI6RkdB7uPuewwI+ODBbuPuewwII
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
4b71467210277e64e4ac8b28b4845e2294e641caa42ecc36b49fc6b2f28051ed.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE