Behavioral task
behavioral1
Sample
f9def48260f52f7ef2494fb23b8773a554391595f1cafac4f9850be23ca911f0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f9def48260f52f7ef2494fb23b8773a554391595f1cafac4f9850be23ca911f0.exe
Resource
win10v2004-20221111-en
General
-
Target
f9def48260f52f7ef2494fb23b8773a554391595f1cafac4f9850be23ca911f0
-
Size
128KB
-
MD5
4781f6bbdfeeabc5f9b289d343c8ef9a
-
SHA1
164e3a7c902315f92cf2bfd16c7e17d3db395e8b
-
SHA256
f9def48260f52f7ef2494fb23b8773a554391595f1cafac4f9850be23ca911f0
-
SHA512
8d0c58fe4e4b0c2c540aee8d3d6f19d23631fbd80a2235301d6ac8c70d630bf78bb61c7a18d1a862917ade146c0d0890ad9284681be24072851159e2d9a9f4ef
-
SSDEEP
3072:6Aop24o1sUY4K4aWqPW7EcG1HQz8DYFs8pg21HNeEvy:J4o1sUtqp1HQ9Fs8SsNeA
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f9def48260f52f7ef2494fb23b8773a554391595f1cafac4f9850be23ca911f0.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 123KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE