Static task
static1
Behavioral task
behavioral1
Sample
dusers.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
dusers.exe
Resource
win10v2004-20220414-en
General
-
Target
dusers.exe
-
Size
207KB
-
MD5
80adc9e5666a4b94fe1637f92d0611b0
-
SHA1
478bb364184d882005d0503c91a9929d81e89765
-
SHA256
eb9a70ac0d1f7c413f10f5308bda81e1da5a9b5bfd2ab7c8d89232eada71c143
-
SHA512
f7eac083f93f5022d8a580303a16c1e12532f6c0dc89e338eb7585d5233c52f39fa7b3e06c06511e6dc68e398151be30074346e66eaccb972f1c497a893d88de
-
SSDEEP
6144:NVm+J4EB7LR8wT3A2iV/1gsSU3qDgpCZyD8hZI:HmC4Ed2wEt1gw3qhZyQQ
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx
Files
-
dusers.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 184KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 62KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE