Behavioral task
behavioral1
Sample
2f6ef29d41e255dc87e7b0150764bc69d06aef3a1f9c54fe59bee3f1db5dc7c3.exe
Resource
win7-20220812-en
General
-
Target
2f6ef29d41e255dc87e7b0150764bc69d06aef3a1f9c54fe59bee3f1db5dc7c3
-
Size
4.0MB
-
MD5
dbd66747e72f5e7e409c4d212a205bc0
-
SHA1
8190427d49dddc1f7d8cf86da9707108ef90bc19
-
SHA256
2f6ef29d41e255dc87e7b0150764bc69d06aef3a1f9c54fe59bee3f1db5dc7c3
-
SHA512
be53e5a9b0b6a743cc304297486c77c20250eec3314e1d93b35c4f16076c87cff476113a2271403ce20ed27e846f4cb610f742450100c8434eb0d50218edafc3
-
SSDEEP
98304:z+6d5njPzUi5seSS2u092+In2VwkPd3IZ0ekOH:/Ln3Jt24nALWK
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx
Files
-
2f6ef29d41e255dc87e7b0150764bc69d06aef3a1f9c54fe59bee3f1db5dc7c3.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 9.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.0MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE