Behavioral task
behavioral1
Sample
f49e9f1cb924f68d459d3d48382de36cad4777af90cb6b3424bea060f02344a9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f49e9f1cb924f68d459d3d48382de36cad4777af90cb6b3424bea060f02344a9.exe
Resource
win10v2004-20220812-en
General
-
Target
f49e9f1cb924f68d459d3d48382de36cad4777af90cb6b3424bea060f02344a9
-
Size
194KB
-
MD5
596d0a4bfb73b54ee065e74ab7434002
-
SHA1
da25bcdae9fefdf7d59d260df9a06088450deadc
-
SHA256
f49e9f1cb924f68d459d3d48382de36cad4777af90cb6b3424bea060f02344a9
-
SHA512
a7b5b7c5b87197ecea69d4cf88561e56c01a611793b820f9a5e95de055654233a7ec66c53f889fc45464ddf7f3e52fc759201a32e1d8282d145233001ab8f36f
-
SSDEEP
6144:83YYYJ8awpIxFxQP8fBuO31MsV9E1gtM9q:kbJIxoPROlpS9q
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f49e9f1cb924f68d459d3d48382de36cad4777af90cb6b3424bea060f02344a9.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 187KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE