Behavioral task
behavioral1
Sample
80cc0a0a4fec7476f0453e741822757124a41e7096675003c1c0e20c9e471a31.exe
Resource
win7-20220812-en
General
-
Target
80cc0a0a4fec7476f0453e741822757124a41e7096675003c1c0e20c9e471a31
-
Size
4.0MB
-
MD5
bb9bdd70279f3323c34a42ec301cded6
-
SHA1
12967ba3af210c3032a241a01354e30c9464ff71
-
SHA256
80cc0a0a4fec7476f0453e741822757124a41e7096675003c1c0e20c9e471a31
-
SHA512
6fdb933d66b5f29559372fb240124660e6692c081a59682202b1a72a5885f24ac16422bef2ed42827777c6d190650cfd245c615e306be700393dde73b85afc53
-
SSDEEP
49152:yWtH6EVy6gHmDVWfyWnlY0DWjNkkvY9Ewrx+HQ4Mxj2X+VewkFzXohdsBT41Xt/B:yWKmhBWs9w9TIw5xy+Ve1FzYbsBs
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx
Files
-
80cc0a0a4fec7476f0453e741822757124a41e7096675003c1c0e20c9e471a31.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 9.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.0MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE