Behavioral task
behavioral1
Sample
04b5384d588ea1a0b3567f4d35ed7d4f734cf671b03e18f70909bf9797bea1e5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
04b5384d588ea1a0b3567f4d35ed7d4f734cf671b03e18f70909bf9797bea1e5.exe
Resource
win10v2004-20220812-en
General
-
Target
04b5384d588ea1a0b3567f4d35ed7d4f734cf671b03e18f70909bf9797bea1e5
-
Size
18KB
-
MD5
cafbae8acfcdf78dd35ec4a03f2eaa8c
-
SHA1
c8fea7e0be41e670fac88f7d0e0c370034825ed3
-
SHA256
04b5384d588ea1a0b3567f4d35ed7d4f734cf671b03e18f70909bf9797bea1e5
-
SHA512
7465019d07a7e0d5b05508578348f44d414919b1bba25403f1675b05b4b3651e8c208c8671a6c498087ab9bdacd74560c6a26ffd92c0f60c463867aad6b49e08
-
SSDEEP
384:i3WuBnSCyg+hfqgJ6QYmgmTR+RuH80/Crs64Z1wJDheyNiwigOK2sYQla1Nc:iaygJ6oTYRucoN64ZOhheyNiwO99b
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
04b5384d588ea1a0b3567f4d35ed7d4f734cf671b03e18f70909bf9797bea1e5.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE