Behavioral task
behavioral1
Sample
119401f5db85322b2702c4176e086af4b886ed1c6e50b3a22a93c56c6221a496.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
119401f5db85322b2702c4176e086af4b886ed1c6e50b3a22a93c56c6221a496.exe
Resource
win10v2004-20220901-en
General
-
Target
119401f5db85322b2702c4176e086af4b886ed1c6e50b3a22a93c56c6221a496
-
Size
247KB
-
MD5
41da2ce19e9e00c261117b8c64a1edb7
-
SHA1
e10058b5f0d22e786d22a9ec1105c056b1c6984e
-
SHA256
119401f5db85322b2702c4176e086af4b886ed1c6e50b3a22a93c56c6221a496
-
SHA512
6f1ac72e4717bc4f7f51b50ee769cfe143a7f925adcaa4e482775bbbae65988619942f9a4881349a1b6785b3ec575bbe1c6ebfbaa6e2095bcd57460f328ca853
-
SSDEEP
6144:0oS/gM2VjhzVmjVJUqQdDzCciaWlxUPi65cb3QvkfnWkzeBMgQ1/:0oS/B2hhOf4OaEx03c7fWk62gQV
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
119401f5db85322b2702c4176e086af4b886ed1c6e50b3a22a93c56c6221a496.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE