Behavioral task
behavioral1
Sample
c49f4a9cf0e8d73cbea7f5cc250586a62868783bdcdcaa7124be6ae6cb070578.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c49f4a9cf0e8d73cbea7f5cc250586a62868783bdcdcaa7124be6ae6cb070578.exe
Resource
win10v2004-20220812-en
General
-
Target
c49f4a9cf0e8d73cbea7f5cc250586a62868783bdcdcaa7124be6ae6cb070578
-
Size
136KB
-
MD5
3e25aaa8c1aef02e642da666c851e4a1
-
SHA1
712dc9dcd6a8942f8d5df483b4673594168c3e58
-
SHA256
c49f4a9cf0e8d73cbea7f5cc250586a62868783bdcdcaa7124be6ae6cb070578
-
SHA512
98fa850fb657b6058095332759abce442454bd17645385e22fe69774dccab7b73b3fed9611c8f5f018380e3299ce52d890407526867b640e9983d2fc17b82c65
-
SSDEEP
1536:ZPEBid2CKTF8qyfZGT76YAIWtBzo7vc+LAp7Qq:ZPEY25T2pB076YAL3Iv5Ep7
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
c49f4a9cf0e8d73cbea7f5cc250586a62868783bdcdcaa7124be6ae6cb070578.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE