Static task
static1
Behavioral task
behavioral1
Sample
bac4b948f4a8cb9c61c6167c7aa814affe670e527190aacf4f31eace55236d25.exe
Resource
win7-20220310-en
General
-
Target
bac4b948f4a8cb9c61c6167c7aa814affe670e527190aacf4f31eace55236d25
-
Size
243KB
-
MD5
15f32b4f39a69e327b285b6cd2dd2cb9
-
SHA1
49ca0b152b2001febfe89d4ff2bea2f989a9a819
-
SHA256
bac4b948f4a8cb9c61c6167c7aa814affe670e527190aacf4f31eace55236d25
-
SHA512
301893a9827946bd478255cc9cbc054c21a422e76bad3f0ded321d264ff14947e1736dd66cedc236a9d82afcd0c2f0c40f5a91d57266ee49acdc6acd14767f84
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx
Files
-
bac4b948f4a8cb9c61c6167c7aa814affe670e527190aacf4f31eace55236d25.exe windows x86
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 77.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 214KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE