Behavioral task
behavioral1
Sample
4bdb79ce2428d7f6b4293f3e37b25bf28d638f8d627e9398cc0337fd767f0d6b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4bdb79ce2428d7f6b4293f3e37b25bf28d638f8d627e9398cc0337fd767f0d6b.exe
Resource
win10v2004-20221111-en
General
-
Target
4bdb79ce2428d7f6b4293f3e37b25bf28d638f8d627e9398cc0337fd767f0d6b
-
Size
684KB
-
MD5
134c964d2131d393eb5f599001dc2ed0
-
SHA1
f5d9a205eaa4a9f6dbc84e4ca188ca3f40fb0163
-
SHA256
4bdb79ce2428d7f6b4293f3e37b25bf28d638f8d627e9398cc0337fd767f0d6b
-
SHA512
00cb61feb406c123c947d13d18222ed7cdf453ae8105e4fdfe9b17afd82d77f86934c396acd834b2679c8a01af667b4c15c1790a2944a176c51a1be06499a64d
-
SSDEEP
12288:iDIAjVRqicZxsu676RaYquh+YbdA4m44ax15sA9dz090YUHupoS:i0YrcZxl67Yj+wdWBaxnhN090r
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
4bdb79ce2428d7f6b4293f3e37b25bf28d638f8d627e9398cc0337fd767f0d6b.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 464KB - Virtual size: 464KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 211KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE