Behavioral task
behavioral1
Sample
1191d202cfc098f7d5529bd1cac8d1724e8807c9d94961203799cc7096112249.exe
Resource
win7-20220812-en
General
-
Target
1191d202cfc098f7d5529bd1cac8d1724e8807c9d94961203799cc7096112249
-
Size
4.0MB
-
MD5
297fd5aaaf704a6022d29c23e827a5d4
-
SHA1
ba089c969c638c2343dfd43e741e2a9851e8f0b9
-
SHA256
1191d202cfc098f7d5529bd1cac8d1724e8807c9d94961203799cc7096112249
-
SHA512
6a6ca4c889700405e5c6708f9691020abfe025c0b5ff0cede222812449982b78f105c8576dbeec494e54c1afc0b3c00e13f32bbc552fb9ed18784d8ae28d6fa3
-
SSDEEP
98304:nz4et3RJKexAuPYZu2pBKaXmnXQ7sS3SkLD:8et6iRYZu2+GHCkLD
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx
Files
-
1191d202cfc098f7d5529bd1cac8d1724e8807c9d94961203799cc7096112249.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 9.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.0MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE