Behavioral task
behavioral1
Sample
f4b640dbb63405149d63a88794c53e22c8c9f7be4fc0b67dce83fc9cd14d6e6e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f4b640dbb63405149d63a88794c53e22c8c9f7be4fc0b67dce83fc9cd14d6e6e.exe
Resource
win10v2004-20221111-en
General
-
Target
f4b640dbb63405149d63a88794c53e22c8c9f7be4fc0b67dce83fc9cd14d6e6e
-
Size
382KB
-
MD5
1b01666c98e3c7930910f5a47f7a4463
-
SHA1
7841e7a35e088c2d0dc54f29f6586266b8e3ce64
-
SHA256
f4b640dbb63405149d63a88794c53e22c8c9f7be4fc0b67dce83fc9cd14d6e6e
-
SHA512
a7c6450f6d06f8f3ec7d14476d3fa9985b083044b700129d348c82b6ce73e643cfae8534d94a62882eded9202ec87bcc6cf6d340efdf6a60bd272fe498c9c1d2
-
SSDEEP
1536:Tfz3bkliP5l6zap7KWAI9Pzj3ktMwEl2a7vKtBb8f7+4cst:Tf7Y0P6zaj9PM2fpKBb8fn
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f4b640dbb63405149d63a88794c53e22c8c9f7be4fc0b67dce83fc9cd14d6e6e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 332KB - Virtual size: 332KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE