Static task
static1
Behavioral task
behavioral1
Sample
a213c607bbace81a31e12bb7871cc6acda265b5c19f61593e49d9a3124ccb992.exe
Resource
win7-20220311-en
General
-
Target
a213c607bbace81a31e12bb7871cc6acda265b5c19f61593e49d9a3124ccb992
-
Size
4.4MB
-
MD5
758479c598ae9f73822b944914063868
-
SHA1
b06e935e4e660733e049995f299fc84dcf6daf90
-
SHA256
a213c607bbace81a31e12bb7871cc6acda265b5c19f61593e49d9a3124ccb992
-
SHA512
cbf6fb876246e6e999fa6c68db887077c27e9e71dc17cecb7bd38db51e3b0fe0788ad6315893af52a609f0ba6b7bbb0d62be0825007c210a6c46c62336db0ddd
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx
Files
-
a213c607bbace81a31e12bb7871cc6acda265b5c19f61593e49d9a3124ccb992.exe windows x86
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 76.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.4MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE