Behavioral task
behavioral1
Sample
6a4bfd57ed650daf290fcbd70eb37053943f2497671e51e5f8cc7b3d82561e00.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6a4bfd57ed650daf290fcbd70eb37053943f2497671e51e5f8cc7b3d82561e00.exe
Resource
win10v2004-20220901-en
General
-
Target
6a4bfd57ed650daf290fcbd70eb37053943f2497671e51e5f8cc7b3d82561e00
-
Size
253KB
-
MD5
5b44082926e353718ea6dd1d503a63a0
-
SHA1
16b663c5f42c43adbbf55aa7ff86db6a726b181f
-
SHA256
6a4bfd57ed650daf290fcbd70eb37053943f2497671e51e5f8cc7b3d82561e00
-
SHA512
7ef4ddb98645725c46d4a8d843acf91762765f046fc0228a3030cfe29d7078f030d8d088a68f03da493678caffc8f3f5e482ecb6a0a1a754e1e559e4fb342fe2
-
SSDEEP
6144:iP5Z3G7SI/WyRMOGjCWS0Zf3Reoe7WWM+1qKX1G5:2Z2OElG6cRY7XM+1jG
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
6a4bfd57ed650daf290fcbd70eb37053943f2497671e51e5f8cc7b3d82561e00.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE