Behavioral task
behavioral1
Sample
357AE268FB3CA9079A3CC844DBB07088D6C4EB8EF18DE7C5E974D8BEAD1CB996.exe
Resource
win7-20220718-en
General
-
Target
357AE268FB3CA9079A3CC844DBB07088D6C4EB8EF18DE7C5E974D8BEAD1CB996
-
Size
4.0MB
-
MD5
e3bd38237b5a50a15c2163135aeb4311
-
SHA1
6e206e1a3dda12e7c10806b06f38e13ed2a10aa3
-
SHA256
357ae268fb3ca9079a3cc844dbb07088d6c4eb8ef18de7c5e974d8bead1cb996
-
SHA512
549bd4aa1ec91a9e8f808c47c33c94a8539bb3e1274d1fd6b19534d6fe31a685af86b5273d17792e492cc8c8fa4c740bd1afb15558dda781c4e0d1323e8fbb79
-
SSDEEP
98304:Ngt1GfVHUbmuQacY/Ex6hZqxY6X/gQZ5DEmU:mt0N0bm4cu466nX/2m
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx
Files
-
357AE268FB3CA9079A3CC844DBB07088D6C4EB8EF18DE7C5E974D8BEAD1CB996.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 9.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.0MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE