Behavioral task
behavioral1
Sample
090c7252a135fc07a76346d91cfc05434b5b3fe72b7eaf40a99ae44f4c0d9058.exe
Resource
win7-20220812-en
General
-
Target
090c7252a135fc07a76346d91cfc05434b5b3fe72b7eaf40a99ae44f4c0d9058
-
Size
4.0MB
-
MD5
1185a7ea8363092504eab6f64dbc24e1
-
SHA1
a02c270b6f424775d25d03d3269f6e2b2fd0da0c
-
SHA256
090c7252a135fc07a76346d91cfc05434b5b3fe72b7eaf40a99ae44f4c0d9058
-
SHA512
770f597b00a08edf3dabfcde9aedee45dfbab9de4f28f1076635b6f7af8ab14fa74786af952831ca83b844cbfff847727787f1d12ea0c0cc1dd5c80714dc627c
-
SSDEEP
98304:I1sRV+GJ90bZwtnXlio1/FFPwryoFMt1a4N:2sj+Ix1iorFPwrdGt8
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx
Files
-
090c7252a135fc07a76346d91cfc05434b5b3fe72b7eaf40a99ae44f4c0d9058.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 9.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.0MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE