Behavioral task
behavioral1
Sample
a42c47e72c889d2ccdc8d36a5cddbe319a086e8ab66fbe3954865ac232f7f3a2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a42c47e72c889d2ccdc8d36a5cddbe319a086e8ab66fbe3954865ac232f7f3a2.exe
Resource
win10v2004-20220812-en
General
-
Target
a42c47e72c889d2ccdc8d36a5cddbe319a086e8ab66fbe3954865ac232f7f3a2
-
Size
269KB
-
MD5
f4cd4ce47e0067c238c8964d26e57544
-
SHA1
281c69076ea447622f9c599344f4416e6d6d62eb
-
SHA256
a42c47e72c889d2ccdc8d36a5cddbe319a086e8ab66fbe3954865ac232f7f3a2
-
SHA512
6343dc7664cccd608eac2d30d30c7e623a7083e09e9e85f09877d8a2b4c6f50941593f9f1b265040c101a64870bc5cbfd3f5a97527ad315aa35edaccbc7a52f6
-
SSDEEP
6144:O+py+nXda5OMvi2OF9zut5sy4njaDdwaYDDzhwhZBMV:OCF9zvGli
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
a42c47e72c889d2ccdc8d36a5cddbe319a086e8ab66fbe3954865ac232f7f3a2.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE