Behavioral task
behavioral1
Sample
44b403d3a817960e7fa35cc42dc44c7630f9ed1e1640424e583b01c12087347f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
44b403d3a817960e7fa35cc42dc44c7630f9ed1e1640424e583b01c12087347f.exe
Resource
win10v2004-20221111-en
General
-
Target
44b403d3a817960e7fa35cc42dc44c7630f9ed1e1640424e583b01c12087347f
-
Size
1.5MB
-
MD5
13971a052a13013419c93034ee003590
-
SHA1
f5195204d56a6e841e6e4c91ad3f80c6efc22338
-
SHA256
44b403d3a817960e7fa35cc42dc44c7630f9ed1e1640424e583b01c12087347f
-
SHA512
abfb9802e99bfc62d0a69720f492c030d81d9f359b1a20fa49c2efd4c773ede2d6ea39cbb789ed5040ef92dd8e28234fde09365cef15b53f55c287040f478cf4
-
SSDEEP
24576:o4V8tG8t4PkIRdFgC/3v5bcZiZFmTqcf4KjEHdfUhfOennnPMxsUJep6/ql1Ywus:o4Csn5baiZhghLCr9v+
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
44b403d3a817960e7fa35cc42dc44c7630f9ed1e1640424e583b01c12087347f.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 536KB - Virtual size: 536KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 995KB - Virtual size: 996KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE