Behavioral task
behavioral1
Sample
949efac19582696647de7e0dd95e41b0e5d94bbb45e83716f6d74f9d0374264d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
949efac19582696647de7e0dd95e41b0e5d94bbb45e83716f6d74f9d0374264d.exe
Resource
win10v2004-20220812-en
General
-
Target
949efac19582696647de7e0dd95e41b0e5d94bbb45e83716f6d74f9d0374264d
-
Size
84KB
-
MD5
f56929c5cee07a7b55079723135d9530
-
SHA1
0b730b97aff9acf0a5b2f08623aec2decb328fdc
-
SHA256
949efac19582696647de7e0dd95e41b0e5d94bbb45e83716f6d74f9d0374264d
-
SHA512
c316e4a1625f45303c6f98a782c02808dc4cc848e405517a4caaee38748dd4f6e86a7ab080707b25549c45b414d8360a745b1488a6c6107ff2b30e3ee517ea4f
-
SSDEEP
1536:hj8fTS5XTGrHZCth0hjFDfXb/R8sECfzgtHga6y5:hjGTS5DGrHeofb/CsECKfT5
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
949efac19582696647de7e0dd95e41b0e5d94bbb45e83716f6d74f9d0374264d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE