Behavioral task
behavioral1
Sample
b49ce688b4c329a00bb80fbf44e78d14ab46bc5d2ddbb73246ea21ff24450518.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b49ce688b4c329a00bb80fbf44e78d14ab46bc5d2ddbb73246ea21ff24450518.exe
Resource
win10v2004-20220812-en
General
-
Target
b49ce688b4c329a00bb80fbf44e78d14ab46bc5d2ddbb73246ea21ff24450518
-
Size
525KB
-
MD5
5b58106cf94e6420891a2316823ea19d
-
SHA1
4d854668005a1103e83f47a289d392b098046792
-
SHA256
b49ce688b4c329a00bb80fbf44e78d14ab46bc5d2ddbb73246ea21ff24450518
-
SHA512
e41aa3d23cb1b9a10891f9fbe4d818cb80bf8527ad987d69814ab26e4dc014c2f7c73f54548a03d953707ebd01e08efa25fd7b20d366760c6188fef49c87dc0b
-
SSDEEP
12288:a47xfLab0aMkRVV3FQaNDPpwRGotSr3kRulgpf4LttZt:a47xu4aMET9NDe3tSrURu88tZt
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b49ce688b4c329a00bb80fbf44e78d14ab46bc5d2ddbb73246ea21ff24450518.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 736KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 419KB - Virtual size: 420KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE