Behavioral task
behavioral1
Sample
c4d25d7ff68e5808193e2d490aeb43b02f7ad1a4558969cde8de612d392e24fa.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c4d25d7ff68e5808193e2d490aeb43b02f7ad1a4558969cde8de612d392e24fa.exe
Resource
win10v2004-20220812-en
General
-
Target
c4d25d7ff68e5808193e2d490aeb43b02f7ad1a4558969cde8de612d392e24fa
-
Size
33KB
-
MD5
48d2f0a5261ca1355e57522c87ed629f
-
SHA1
b13171d3c91969a64bbc101a42e7a75810480384
-
SHA256
c4d25d7ff68e5808193e2d490aeb43b02f7ad1a4558969cde8de612d392e24fa
-
SHA512
102abe0d825ed4bfaf293110f81e592f1b7833863249d9db91db9154e63143186006e27054410999fd2f0c14af9f92c57a3a6218c12248a37057f3c744046fed
-
SSDEEP
768:uOg4p+HuoE5ZbAWBprIdjmYZYn9Md8JRZTOXsoESAxrrB:ngp2ZUpdiYeXjZ6XD1AxPB
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
c4d25d7ff68e5808193e2d490aeb43b02f7ad1a4558969cde8de612d392e24fa.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 288KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 77KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE