Behavioral task
behavioral1
Sample
a54e8f771c9b07c222f6fd09406de419057622577c726006fc931af65bdbce8e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a54e8f771c9b07c222f6fd09406de419057622577c726006fc931af65bdbce8e.exe
Resource
win10v2004-20221111-en
General
-
Target
a54e8f771c9b07c222f6fd09406de419057622577c726006fc931af65bdbce8e
-
Size
148KB
-
MD5
49b4d8b64e33dc1e102550063bf6d71b
-
SHA1
99686072d34a040c32fda3bec8355ad0c6466e8d
-
SHA256
a54e8f771c9b07c222f6fd09406de419057622577c726006fc931af65bdbce8e
-
SHA512
7e328da6252a7e4cee572d342b447be3efc9ad85ce1d0dd4b0249ed384ca23a09d6db65ab6082af576a384877258151d22e6f40d3835d5eeeff62d81613a07c2
-
SSDEEP
1536:FiqepEy8G1o/lqyvGG8uS+uaPzflhk2x8rb8nTaJb44iZNvoCEx:oyG1o9Tg+RPDrf8rTb4THvo
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
a54e8f771c9b07c222f6fd09406de419057622577c726006fc931af65bdbce8e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE