Behavioral task
behavioral1
Sample
b41a590b87c5f3cf95674748f863e5b82fe7f994f6533a6846b1d06778d781ea.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b41a590b87c5f3cf95674748f863e5b82fe7f994f6533a6846b1d06778d781ea.exe
Resource
win10v2004-20221111-en
General
-
Target
b41a590b87c5f3cf95674748f863e5b82fe7f994f6533a6846b1d06778d781ea
-
Size
135KB
-
MD5
9b454123f13e260acaa263af8f8fcf7c
-
SHA1
14757f7b35e9e29b60112b03ac04538a1423a814
-
SHA256
b41a590b87c5f3cf95674748f863e5b82fe7f994f6533a6846b1d06778d781ea
-
SHA512
cdf77fe1faaf0c623d14f3699bf19d9f3315d5953d4bb7983544be0a7089a18b01bad958a6b99c97b7a78e03e3fb92ac2fb2a35548ae97f7ff8ad46372038d39
-
SSDEEP
3072:SQKQ2FakJ3hVOH4NZu0k+DRKJsg+GY8ZQjJsYcuaf1NUoutR5Y:z24GG4NZC+DUZrY8ZQjPi1NUoSR
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b41a590b87c5f3cf95674748f863e5b82fe7f994f6533a6846b1d06778d781ea.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 196KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 106KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE