Behavioral task
behavioral1
Sample
5434491f1e617b04a822992e7d2b375d6d77965511617eba43981d69532d12cf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5434491f1e617b04a822992e7d2b375d6d77965511617eba43981d69532d12cf.exe
Resource
win10v2004-20220812-en
General
-
Target
5434491f1e617b04a822992e7d2b375d6d77965511617eba43981d69532d12cf
-
Size
1.5MB
-
MD5
1b9c30095466b3ab2f691d9187803b6e
-
SHA1
d16d4ea6706d7b2f890b4c072f595dd865c3036d
-
SHA256
5434491f1e617b04a822992e7d2b375d6d77965511617eba43981d69532d12cf
-
SHA512
376da9c2fb1a81d7383ada3f7fd04f817c0440a3afc3bfc3e3279842bdff095f6e523cbd75cbdda632cfdfb76417cfb5ce6685e03ff36d79f2d092d97b9b1528
-
SSDEEP
24576:81DxdzRGV9dx0agP9FyU/zvPMDnQ/TjYKWil/ZhUw2N37P2iwvi:MvtGN+1HDcTWTjY5ilRhkLPBwvi
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
5434491f1e617b04a822992e7d2b375d6d77965511617eba43981d69532d12cf.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mjg Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE