Behavioral task
behavioral1
Sample
b4474f2638e54de81b768588f61c01a9478417da38021a411feb40514229e564.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b4474f2638e54de81b768588f61c01a9478417da38021a411feb40514229e564.exe
Resource
win10v2004-20221111-en
General
-
Target
b4474f2638e54de81b768588f61c01a9478417da38021a411feb40514229e564
-
Size
189KB
-
MD5
46e586ca457af99bf9678c4c860d5068
-
SHA1
c6057a13ef4c1b4980fc4910274db8fae531e930
-
SHA256
b4474f2638e54de81b768588f61c01a9478417da38021a411feb40514229e564
-
SHA512
e7690c33711f3428deba0925f92a0af11ed13221eb1e6074988f5639cc2f2246db20cfbabeff3df76f94d6559b0e915fe8ae0b37b974ebcf50eb03d271a741de
-
SSDEEP
3072:vQYKgn4BjUvLHopV4AUIHf4b/kUpcGEMVrK5aGxustRfVBooVj06jSgha6RTszj4:vrKg4ZUvbqVoWfO/HeWrDMpom0exRAsb
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b4474f2638e54de81b768588f61c01a9478417da38021a411feb40514229e564.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 144KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 185KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE