Behavioral task
behavioral1
Sample
042beaa6e1f6676346fcf6729b541d889170bdbffa9da9402c5616a361ee55a9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
042beaa6e1f6676346fcf6729b541d889170bdbffa9da9402c5616a361ee55a9.exe
Resource
win10v2004-20220901-en
General
-
Target
042beaa6e1f6676346fcf6729b541d889170bdbffa9da9402c5616a361ee55a9
-
Size
261KB
-
MD5
0a63b1a67c3c4f4361b2af0f2e0d405d
-
SHA1
a96ef28e93767439d41dd8361aa861de35907209
-
SHA256
042beaa6e1f6676346fcf6729b541d889170bdbffa9da9402c5616a361ee55a9
-
SHA512
5e134e5005d65e689c838c153d1941d00539a02c932aaf09458c50cb62939eb753bc5f1e317c1b2af9acaccd1c94dcff50d32c3dbd03cdda92a71955321dcc1a
-
SSDEEP
3072:VoCxGrSb7U/nAbOzPu9eHsRq//S7MrQ8FXAzKBZKuMlxR1uqjrCbNShrga/7GEUO:WCes7UxHs4/BxAzYYLmbNSND7/jHZoS
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
042beaa6e1f6676346fcf6729b541d889170bdbffa9da9402c5616a361ee55a9.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE