Behavioral task
behavioral1
Sample
b4d6a492d633e4191973ddd20f66bff83143641f2f605b9a1cb36399e7c32912.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b4d6a492d633e4191973ddd20f66bff83143641f2f605b9a1cb36399e7c32912.exe
Resource
win10v2004-20220812-en
General
-
Target
b4d6a492d633e4191973ddd20f66bff83143641f2f605b9a1cb36399e7c32912
-
Size
49KB
-
MD5
a70e9360d337e791223fda40d0b3b275
-
SHA1
a479c5f60ef7bfc5fd64d42e5dd3ea76768a2b5c
-
SHA256
b4d6a492d633e4191973ddd20f66bff83143641f2f605b9a1cb36399e7c32912
-
SHA512
2964956deb37e035040cd771a7cf00d4c548dafdf273ad9ba464b0c8917018ea7a38695d6cd9c13265453a6c8615819fbd5330be4d0733d0006bad8d5d9cf801
-
SSDEEP
384:uAjv9rSIrhWKYSvzZkSiMH9bUtvXD7S3mW0qJGB+Ax9r6+I9PfYUDA8zy:uA5SrqbVieUJHA0qJGBJxwLoIAiy
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b4d6a492d633e4191973ddd20f66bff83143641f2f605b9a1cb36399e7c32912.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
."""" Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE