Behavioral task
behavioral1
Sample
c46983c0bddf52247db2fa7a70ae1c87f60cdb11847482b85a61ff6ce5074c85.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c46983c0bddf52247db2fa7a70ae1c87f60cdb11847482b85a61ff6ce5074c85.exe
Resource
win10v2004-20221111-en
General
-
Target
c46983c0bddf52247db2fa7a70ae1c87f60cdb11847482b85a61ff6ce5074c85
-
Size
28KB
-
MD5
cb12311863e62023124ab508abb426b1
-
SHA1
118abb19f147d6d9b3d4d51139824c4520295282
-
SHA256
c46983c0bddf52247db2fa7a70ae1c87f60cdb11847482b85a61ff6ce5074c85
-
SHA512
0e5e7108963991d6b854cf90c6e0c4558d3bbdd851cd11998b73cf007b2780229c5b037be8556315cd630b21f190c83792bc053f2a953a651fd8c217ba0a4f22
-
SSDEEP
384:u2R7RabPvPCHLpevz3cZeAHmoWRyTtStdPLjGUrzy2mBQ/VJCox22/KP/z6gK:9R1GPvPymzMsQUH7HWBYw/z6
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
c46983c0bddf52247db2fa7a70ae1c87f60cdb11847482b85a61ff6ce5074c85.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rvmhnqt Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE