Behavioral task
behavioral1
Sample
56fd01bd3d577037364ea728fef33e3c5e105f474e53c937477fb34da6004cee.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
56fd01bd3d577037364ea728fef33e3c5e105f474e53c937477fb34da6004cee.exe
Resource
win10v2004-20220812-en
General
-
Target
56fd01bd3d577037364ea728fef33e3c5e105f474e53c937477fb34da6004cee
-
Size
330KB
-
MD5
3e3d057e0f5bdbc3a2a14b92797caaca
-
SHA1
9887c0649c79e50e507536a10f229a9789db8a61
-
SHA256
56fd01bd3d577037364ea728fef33e3c5e105f474e53c937477fb34da6004cee
-
SHA512
8fe22f4c34b5b7b77dc39e9763056cc61588922d7371761275ae4ccdf7129186a16a300ea3fdd33dd45f338f07aa4a15d9f5e8579a3a7d8e1cd8cee1362087a4
-
SSDEEP
6144:XeklZ/zUMu4pDSxsCMRzf7x3SfS1JAzXBtL76lXJyE+SCbnHIXK/VfNP:ukHLUMuiv9RgfSjAzRtyXJz+S4H/fNP
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
56fd01bd3d577037364ea728fef33e3c5e105f474e53c937477fb34da6004cee.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 424KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 253KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE