Behavioral task
behavioral1
Sample
c46e75e6fc659f3467d45f9dae673265226998c7ee0935989fd119c80ab3d850.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c46e75e6fc659f3467d45f9dae673265226998c7ee0935989fd119c80ab3d850.exe
Resource
win10v2004-20220812-en
General
-
Target
c46e75e6fc659f3467d45f9dae673265226998c7ee0935989fd119c80ab3d850
-
Size
390KB
-
MD5
40d8c784c05da196a4fa8c6d63de1da7
-
SHA1
c60e796d432f01ead5f2b790f7a5c4ba83293af7
-
SHA256
c46e75e6fc659f3467d45f9dae673265226998c7ee0935989fd119c80ab3d850
-
SHA512
32506cf2532d9ff24832a6c23c075171fee9746a2bd3f0e8807f437b3f4cdc688d9a55489e98fb5bf14e0f85cbdaf6d4c7b5d52289a8d19674cdb08b6a501e60
-
SSDEEP
6144:AuHIU3SCXOM31Gs48xmj0sFNJL+xd0q4N:LoUi831Mjnpf
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
c46e75e6fc659f3467d45f9dae673265226998c7ee0935989fd119c80ab3d850.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 376KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 168KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 87KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.LUPX1 Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE