Behavioral task
behavioral1
Sample
58a797becda79aeb094e87cfa08d6ba44c67bd302cdf147ab40534706eff5563.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
58a797becda79aeb094e87cfa08d6ba44c67bd302cdf147ab40534706eff5563.exe
Resource
win10v2004-20220812-en
General
-
Target
58a797becda79aeb094e87cfa08d6ba44c67bd302cdf147ab40534706eff5563
-
Size
168KB
-
MD5
795a7113f9ebed17f98be73e04cc8460
-
SHA1
66bc0a67d404708d1c44d1e582859bff1bfe289b
-
SHA256
58a797becda79aeb094e87cfa08d6ba44c67bd302cdf147ab40534706eff5563
-
SHA512
515940d3f803490a045ac8b836337c106a5e4900665c38d1b239b77eda2251c4f342f839f296532ff4a6f00f2ce5ff1170377a98a7c8934a6374b111f516b43f
-
SSDEEP
3072:drprljj4Nsrqts1t9jL4E8RYyHesW13VjRgjhQo4CKBPimJl8mk7C7:drp5f4GrMs1QbYy+s8ShQo4nPim7Zk7S
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
58a797becda79aeb094e87cfa08d6ba44c67bd302cdf147ab40534706eff5563.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 157KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE