Static task
static1
Behavioral task
behavioral1
Sample
64baea6c193db9e41ef617f86cd77599eaf06fa8054e362051b98147ed5abdb3.exe
Resource
win7-20220223-en
Behavioral task
behavioral2
Sample
64baea6c193db9e41ef617f86cd77599eaf06fa8054e362051b98147ed5abdb3.exe
Resource
win10v2004-en-20220113
General
-
Target
64baea6c193db9e41ef617f86cd77599eaf06fa8054e362051b98147ed5abdb3
-
Size
404KB
-
MD5
a77c2cd87f4f064352854ff7851a89a3
-
SHA1
cf93d35e504bb1af5bf2faa2281726e541e98c82
-
SHA256
64baea6c193db9e41ef617f86cd77599eaf06fa8054e362051b98147ed5abdb3
-
SHA512
0c91d8646007796839bbd73eef95b60f49bd7308a313d00f852a5e7defaa8d5bf9b59461b7968daf06071f09134f9345b87c4ca0cb289ecdd5efd1214983b8e7
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx
Files
-
64baea6c193db9e41ef617f86cd77599eaf06fa8054e362051b98147ed5abdb3.exe windows x86
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 792KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 401KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE