Behavioral task
behavioral1
Sample
4d7be0fbf81778d92b4455c50636a93992b5f1fc42075fecf5041c409ad737a9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4d7be0fbf81778d92b4455c50636a93992b5f1fc42075fecf5041c409ad737a9.exe
Resource
win10v2004-20221111-en
General
-
Target
4d7be0fbf81778d92b4455c50636a93992b5f1fc42075fecf5041c409ad737a9
-
Size
501KB
-
MD5
4f8c1a159bec386f011148d74d2a7ab0
-
SHA1
735bfad4ab866815dcfc29c2bd3ddddc766e94ad
-
SHA256
4d7be0fbf81778d92b4455c50636a93992b5f1fc42075fecf5041c409ad737a9
-
SHA512
076c2bff7c2f45cb4b2cfeda0c3bfb92898dfc2feef0724e37b21c1c1f4d07b44d1d22e5661a2e87e35808949690ef13a893f15690054ff663b6d0e2b08a3fa7
-
SSDEEP
3072:WA4EpOWNVzQ3/hgGbQ3SsF3f5D9XoohAYBp+d0/XiNlnYqtxnPFNwTqx4ZYdwnTD:WEMWNVzYKtJNlNZSASkqrITW+T2s
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
4d7be0fbf81778d92b4455c50636a93992b5f1fc42075fecf5041c409ad737a9.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 300KB - Virtual size: 300KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 193KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE