Behavioral task
behavioral1
Sample
49fabc322fe1f92d20a312a30a0b492da60c47af392839e6e671b2af4fd84ac4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
49fabc322fe1f92d20a312a30a0b492da60c47af392839e6e671b2af4fd84ac4.exe
Resource
win10v2004-20221111-en
General
-
Target
49fabc322fe1f92d20a312a30a0b492da60c47af392839e6e671b2af4fd84ac4
-
Size
630KB
-
MD5
33992e0b15425f79d1bc82d09f3fe8a5
-
SHA1
46526cf0fc1c31b978ca9071a1369a65a22bc16c
-
SHA256
49fabc322fe1f92d20a312a30a0b492da60c47af392839e6e671b2af4fd84ac4
-
SHA512
0c3a96aaba789022d87294a18f3b8f29edfb8745cd65f24190aa00bdcb506351f9df8ae18708387ea37b86949a60df33e0561d728b3a619a2d3ddeb24f820937
-
SSDEEP
12288:MEZiqbWtD9HGajeKoXMxMItMtCIb3Tl9qt2OVR:RVqGaSKoOtMtCIb3U2OV
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
49fabc322fe1f92d20a312a30a0b492da60c47af392839e6e671b2af4fd84ac4.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1004KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 513KB - Virtual size: 516KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE