Behavioral task
behavioral1
Sample
5e9e7249f1ed617cdd841b47fe8c427afdad1cb930195f4464a0bb5c8b0fc434.exe
Resource
win7-20220812-en
General
-
Target
5e9e7249f1ed617cdd841b47fe8c427afdad1cb930195f4464a0bb5c8b0fc434
-
Size
4.0MB
-
MD5
b1c8f9a8afeb32e2794573297e089ef4
-
SHA1
988118c7a3d1ba9596ed97faa45bdb0744ebe9ed
-
SHA256
5e9e7249f1ed617cdd841b47fe8c427afdad1cb930195f4464a0bb5c8b0fc434
-
SHA512
53b28194919d4f0571ed202db1ab16b22a3205623b1b47beace18489845cc6a2c8a5bb0145a6149efb188c6783bdf552c0c6583608257e0763dc465863cb3959
-
SSDEEP
98304:IN8GaQAkc006Oc2L4sBy83Ee4n1QA/ifB2J+djCCmQcj1FmXPcA5OFh:IWGvTc0l2L4h80e4n1N652Ed2pT1Fm/m
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx
Files
-
5e9e7249f1ed617cdd841b47fe8c427afdad1cb930195f4464a0bb5c8b0fc434.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 9.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.0MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE