Behavioral task
behavioral1
Sample
b4ab43c7c627987d6af5de3baac5eb9d85a07e58ad2ed2435dc39ef657d7ea59.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b4ab43c7c627987d6af5de3baac5eb9d85a07e58ad2ed2435dc39ef657d7ea59.exe
Resource
win10v2004-20220812-en
General
-
Target
b4ab43c7c627987d6af5de3baac5eb9d85a07e58ad2ed2435dc39ef657d7ea59
-
Size
169KB
-
MD5
77a9cdb093d61eb86cef93b4e01ec2b2
-
SHA1
5e28a99e660fbe3a194a3bd832f217d91da0f94f
-
SHA256
b4ab43c7c627987d6af5de3baac5eb9d85a07e58ad2ed2435dc39ef657d7ea59
-
SHA512
0c5ec453f1d7f02e847306aacfd765f151c4759d6dcfdff61506a698b66c5be7c90d88ebb3c7a13585887c6cfa83ee86fa1d5ae04f7ee2dbd10b94c5e205b11d
-
SSDEEP
1536:FycZTqPwRYjs+O8NjHFlXLxlr12AMia02cPHVnrEEYa9Y7eGD5VdmBlm/M7nouy8:g+1UtOgjHDLo702+EER61zb/Mjout
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b4ab43c7c627987d6af5de3baac5eb9d85a07e58ad2ed2435dc39ef657d7ea59.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ightalo Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE