Static task
static1
Behavioral task
behavioral1
Sample
d64a8cba1785faf9616ffe7a982ab013432b23aef75bd097d4f75dbe79ad2415.exe
Resource
win7-20220311-en
General
-
Target
d64a8cba1785faf9616ffe7a982ab013432b23aef75bd097d4f75dbe79ad2415
-
Size
173KB
-
MD5
cbdfe40fef7a9604064f8494f73e49bc
-
SHA1
09bf2fcb2f8c54e752eb5a10f2b6fc66d584b43e
-
SHA256
d64a8cba1785faf9616ffe7a982ab013432b23aef75bd097d4f75dbe79ad2415
-
SHA512
bee9514bd26fa31ba4977c4088d584884861dba4a9e69264e95a1fc5804edde3310ddc07f762d9908cfbf8c6436a32bd4b7539ac254913b2fa97c528bf1238dd
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx
Files
-
d64a8cba1785faf9616ffe7a982ab013432b23aef75bd097d4f75dbe79ad2415.exe windows x86
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 67.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 144KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE