Behavioral task
behavioral1
Sample
948774b57955f34cf56a85ddb66d78ea1ade89306c97803ba20049b520e5bcdb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
948774b57955f34cf56a85ddb66d78ea1ade89306c97803ba20049b520e5bcdb.exe
Resource
win10v2004-20221111-en
General
-
Target
948774b57955f34cf56a85ddb66d78ea1ade89306c97803ba20049b520e5bcdb
-
Size
22KB
-
MD5
154d2352779fd0dd3b27795897800b5c
-
SHA1
4b7bb5a520d0f8c6ad48ce9b3b029454c7368302
-
SHA256
948774b57955f34cf56a85ddb66d78ea1ade89306c97803ba20049b520e5bcdb
-
SHA512
bc38a58748cc6e69317ad02472ea33424f630973b19a2a415239a3957e78581e0cf620efdfdb2be042a0fae2df21142361943ef34c0f96552cf75c5d5a10f784
-
SSDEEP
192:ataTxEAfJuh+bkl21kUJUGmwTgBhQIRt/Z7bapL7dlyEv:ataNJpy2SUawsBiIRdZ7M7dI4
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
948774b57955f34cf56a85ddb66d78ea1ade89306c97803ba20049b520e5bcdb.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE