Behavioral task
behavioral1
Sample
92245780525c0fec0ea8e8a9a6476a203854add640c090e2d66df35c0b4047c9.exe
Resource
win7-20220715-en
General
-
Target
92245780525c0fec0ea8e8a9a6476a203854add640c090e2d66df35c0b4047c9
-
Size
4.0MB
-
MD5
ea2b810e41d2cf01faed23007e21dc1c
-
SHA1
f47c68304448f81dd59a5641f26a2affbd5d1bb8
-
SHA256
92245780525c0fec0ea8e8a9a6476a203854add640c090e2d66df35c0b4047c9
-
SHA512
da50d6afb203cc22022c7feb7314f6ee94587aeccbd0780514bf33b263afdd37fe94e711c860dfbbe27648b1c09bc3da33150276616d7c85b0fbb10d495184df
-
SSDEEP
98304:eIFNsqMhlQdSQwQdUsWgrywhb+J89sRjsrTd52NidX:eIFNJNwnQ1WKj2Nid
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx
Files
-
92245780525c0fec0ea8e8a9a6476a203854add640c090e2d66df35c0b4047c9.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 9.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.0MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE