Behavioral task
behavioral1
Sample
119E5BF72D68C4881A5DFB0A40C85C32ADB85CC7F09071C92FDF03B736D66165.exe
Resource
win7-20220718-en
General
-
Target
119E5BF72D68C4881A5DFB0A40C85C32ADB85CC7F09071C92FDF03B736D66165
-
Size
4.0MB
-
MD5
2c90b9bd2f5103e4df4d5232ddf4fd33
-
SHA1
3eb10051b0159a5a0d44432e2fe2abf33eb1c931
-
SHA256
119e5bf72d68c4881a5dfb0a40c85c32adb85cc7f09071c92fdf03b736d66165
-
SHA512
dad76f2c6b57840a34cb55f20eec964114b5718f20deeeab0d0f7a70f7a413b46d9ead6bbdbcb92f9751e69ff858897ea98d822ec972bcd1a7adaaed5a12e002
-
SSDEEP
98304:aCeeAAnUp77XRvoo9us1vEFk9rAN3HEq8b0ZM37k:aCvAAqjf9d1vNE3HEvb0ZMr
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx
Files
-
119E5BF72D68C4881A5DFB0A40C85C32ADB85CC7F09071C92FDF03B736D66165.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 9.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.0MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE