Behavioral task
behavioral1
Sample
C85A77AC7D13BE538B715BA063B3EA8801829DB5A9956087B917079DBA6E5E12.exe
Resource
win7-20220718-en
General
-
Target
C85A77AC7D13BE538B715BA063B3EA8801829DB5A9956087B917079DBA6E5E12
-
Size
4.0MB
-
MD5
d39d2bd0ea4944a7ed19c0079f4ef121
-
SHA1
0360e4d8cd0f5af4a59dc120fffc9d2a9a6baf1e
-
SHA256
c85a77ac7d13be538b715ba063b3ea8801829db5a9956087b917079dba6e5e12
-
SHA512
a55746eee166053b603ea3a0aa95de2ff67217430319965ffcde44bf3bab4f96674ad81e47f801c00bc16e9d34f0569fca2ebba8580b2f294574cf7b28b256f2
-
SSDEEP
98304:1dM0SIDYeVeb4qIhRINL5rPtZPaI/W4lPl9/Gbv:1d3HDJVmZP/dl3+bv
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx
Files
-
C85A77AC7D13BE538B715BA063B3EA8801829DB5A9956087B917079DBA6E5E12.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 9.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.0MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE