Behavioral task
behavioral1
Sample
b4f407e57daf00cd263390c9ea197ba68572e2c4c489d423096b417f6519d1c9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b4f407e57daf00cd263390c9ea197ba68572e2c4c489d423096b417f6519d1c9.exe
Resource
win10v2004-20221111-en
General
-
Target
b4f407e57daf00cd263390c9ea197ba68572e2c4c489d423096b417f6519d1c9
-
Size
47KB
-
MD5
ae64458a5c2fd3416f82cd1d5b74bc3e
-
SHA1
351b0bbd6e69395057a5e810f92c9dc2563fa3f6
-
SHA256
b4f407e57daf00cd263390c9ea197ba68572e2c4c489d423096b417f6519d1c9
-
SHA512
55a07c887e66826f35e3436efddf633796a1c2ff9f4541000cabf547a2cc6c1630b88dc6089a315f0bbc54f89ab29112e8f30567a521e54e79c4d03f7423eae2
-
SSDEEP
768:RGI2LSvJDZMh+IxsKzRGyp2aebQSqOpzx1elmPcvCAyVR2CxKBfTNrk:0I2LAJDuhWKzRJp27bpim06hZqfpg
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b4f407e57daf00cd263390c9ea197ba68572e2c4c489d423096b417f6519d1c9.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 200KB - Virtual size: 198KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 996B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ