Behavioral task
behavioral1
Sample
4da0176d5ad2dbd15ef9fabfe62259c3799acd5793d84a0d4d578ed625e0ffbe.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4da0176d5ad2dbd15ef9fabfe62259c3799acd5793d84a0d4d578ed625e0ffbe.exe
Resource
win10v2004-20220812-en
General
-
Target
4da0176d5ad2dbd15ef9fabfe62259c3799acd5793d84a0d4d578ed625e0ffbe
-
Size
968KB
-
MD5
3aa02a8c6ea39178e3a07f670c3d9bf0
-
SHA1
bbc41ac997f60f5c4e10e113a80aed3a734a3d2d
-
SHA256
4da0176d5ad2dbd15ef9fabfe62259c3799acd5793d84a0d4d578ed625e0ffbe
-
SHA512
867f9c00e27839a0580bed014c895cc2b4624e32af33ca7528f730aea682b253936755af794b5df798427f397b759c02009fee180e17a480614dcff6926e4a29
-
SSDEEP
12288:gBqKAFbAp1LUhX9TIGrbhegY3+uZbIwJ0J13N/9VfaAo7SK7VFl+AHrbMPamoS:gB8ApAXyGXhG5ov9tC7S+gALQ
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
4da0176d5ad2dbd15ef9fabfe62259c3799acd5793d84a0d4d578ed625e0ffbe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 556KB - Virtual size: 556KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 404KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE