Static task
static1
Behavioral task
behavioral1
Sample
a2676038aeee24af09b0464a1244f34f95dcf2cb4cb883753ef66a0e9213e47a.exe
Resource
win7-20220414-en
General
-
Target
a2676038aeee24af09b0464a1244f34f95dcf2cb4cb883753ef66a0e9213e47a
-
Size
4.4MB
-
MD5
364526dd099a238f2351e994be7a912c
-
SHA1
d8f39848296c18372421bba022bd62a688adcd0c
-
SHA256
a2676038aeee24af09b0464a1244f34f95dcf2cb4cb883753ef66a0e9213e47a
-
SHA512
67ab390b2635c36f180659401f4877bc72600bc27b53c46b06ca9f08eb82e5a3449069a9c6463e43d7803e3741ce86569c97c822f018405b54599981286512ed
-
SSDEEP
98304:Xb8R3fMGUZVyy9t4d8bU8OMXiX0OleyL45TIMNYh/PJMzScTO9IYWyZ2/psuLO1K:LHr9t4d8bgMXiXKDIMIbRwKp19j
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx
Files
-
a2676038aeee24af09b0464a1244f34f95dcf2cb4cb883753ef66a0e9213e47a.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 67.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE