Behavioral task
behavioral1
Sample
c4e1989519eca3872ecb75c2ab6c25bd29c0560c222112bc689ac95dc6499e37.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c4e1989519eca3872ecb75c2ab6c25bd29c0560c222112bc689ac95dc6499e37.exe
Resource
win10v2004-20221111-en
General
-
Target
c4e1989519eca3872ecb75c2ab6c25bd29c0560c222112bc689ac95dc6499e37
-
Size
391KB
-
MD5
df67a547064983527a494699a60192b5
-
SHA1
f9b352481eff62d4940617af97db521b9de1ac2a
-
SHA256
c4e1989519eca3872ecb75c2ab6c25bd29c0560c222112bc689ac95dc6499e37
-
SHA512
39e15f1c5a61e3485f98b96ffb1d45a5c0ca0dd65ae0c8b2b9550397efd133f6de0457592689ccf29a9688a9cb71778e72f831d4ba20a09612b4f80c702dc480
-
SSDEEP
12288:DWuDR53+Uad4KjFHpNbsYMb3GSsxVmQoS:DWuF53+hd4KxHbsLzGvE
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
c4e1989519eca3872ecb75c2ab6c25bd29c0560c222112bc689ac95dc6499e37.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 4.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 382KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE