Behavioral task
behavioral1
Sample
4ef915a488b0482601ff679fa1ac5edf77f7ca7c12501e95a6fe26203ef5acb4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4ef915a488b0482601ff679fa1ac5edf77f7ca7c12501e95a6fe26203ef5acb4.exe
Resource
win10v2004-20221111-en
General
-
Target
4ef915a488b0482601ff679fa1ac5edf77f7ca7c12501e95a6fe26203ef5acb4
-
Size
600KB
-
MD5
2a06f8a3d81435ff1f61819f5255c810
-
SHA1
e21d35a3ea5f3af99f7e9467fbfb54b1d1b77fcc
-
SHA256
4ef915a488b0482601ff679fa1ac5edf77f7ca7c12501e95a6fe26203ef5acb4
-
SHA512
1c0517f178aff2ac136e24952cf7ac4db30c41f7914a1168ae25bfb90a555e93fb5a6c4c4fe77613dceeda1c03c6491a4eb748718f96d62615c814a834d2ad6e
-
SSDEEP
12288:Agt9Z4oHJyXwaak+kQyo7UH+RKh3+qjcqGOz51veJnQmilAFw1oS:Agtz7zaj+9jREpfGAlEnQnG
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
4ef915a488b0482601ff679fa1ac5edf77f7ca7c12501e95a6fe26203ef5acb4.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 583KB - Virtual size: 584KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE