Behavioral task
behavioral1
Sample
a4f9beebe44ca9ac5dfe96021d14c7e982b322737d833f7736bb2c116613ec61.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a4f9beebe44ca9ac5dfe96021d14c7e982b322737d833f7736bb2c116613ec61.exe
Resource
win10v2004-20221111-en
General
-
Target
a4f9beebe44ca9ac5dfe96021d14c7e982b322737d833f7736bb2c116613ec61
-
Size
310KB
-
MD5
066e70ec27b9cace2dc468c0a2048fd4
-
SHA1
cb3668efce6d16690938839263970d3290967c5e
-
SHA256
a4f9beebe44ca9ac5dfe96021d14c7e982b322737d833f7736bb2c116613ec61
-
SHA512
aa2b4a0a615c832a3ce8f5473de8af1a12a25aed4f405fb969afd537714710d24d1fca699dd3be43baeacb5dd9a96c2a6d6223faa7dfce773e0a92965b017f0b
-
SSDEEP
6144:zQiuYrMshOEvZ+EKPuufky2v1CURUl6X1lXGVjNJa:4sBhOuu4tCyUgXT+a
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
a4f9beebe44ca9ac5dfe96021d14c7e982b322737d833f7736bb2c116613ec61.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ultra Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ