Behavioral task
behavioral1
Sample
a4bd5a5bfcdae7b7634f7ce0bf8052ce155935067fd06862d9393201c29c11f9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a4bd5a5bfcdae7b7634f7ce0bf8052ce155935067fd06862d9393201c29c11f9.exe
Resource
win10v2004-20221111-en
General
-
Target
a4bd5a5bfcdae7b7634f7ce0bf8052ce155935067fd06862d9393201c29c11f9
-
Size
101KB
-
MD5
98627b49ae24f96aad04cc18e9a0c7f3
-
SHA1
7f360264667855c0d674280955f5af10ea329b6a
-
SHA256
a4bd5a5bfcdae7b7634f7ce0bf8052ce155935067fd06862d9393201c29c11f9
-
SHA512
2110491ae0dcf68a9ae400e2e324dd32e0c9797233f96c97683502209a05539a4e90e38aa186146351d5d909894860fb5fa5784eb8f525b20dfba158cd53a977
-
SSDEEP
1536:AjG9fYp6+1TONv3lUt4zxEWALuVpQCrkVW30RRxzO1YDlOULT9xm6MSNRR1oKdJ:Aj4ad1TeKq2uVbrkcczIAlNBxmk
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
a4bd5a5bfcdae7b7634f7ce0bf8052ce155935067fd06862d9393201c29c11f9.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 220KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE