Behavioral task
behavioral1
Sample
42540636306f5e50c05c648a2a8afd392bb111ed0f90893f3ce43b01bc182ce7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
42540636306f5e50c05c648a2a8afd392bb111ed0f90893f3ce43b01bc182ce7.exe
Resource
win10v2004-20220901-en
General
-
Target
42540636306f5e50c05c648a2a8afd392bb111ed0f90893f3ce43b01bc182ce7
-
Size
245KB
-
MD5
ce088b82dd47abb1512a2d2ac78d51f9
-
SHA1
089567011fa6a85ea9d17da25d93d77cf5bf136a
-
SHA256
42540636306f5e50c05c648a2a8afd392bb111ed0f90893f3ce43b01bc182ce7
-
SHA512
63d854daed92e8918f77e197bfca3f87ce531a41bb025f49752326d886d264bae9108aed01f4990e06a3ed46591459ce7f41c8ba579f906d4e576369fffce40b
-
SSDEEP
3072:E1I1Ll99I1Ll9eB3FeWvCSDBL0iItHBnfS/uKpn/hwxYU5aaTVzehNtXDEy8:E1I15I1G34WFuouxdhyvtXDY
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
42540636306f5e50c05c648a2a8afd392bb111ed0f90893f3ce43b01bc182ce7.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 221KB - Virtual size: 221KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA