Behavioral task
behavioral1
Sample
06ab18fa67099bcfbcb9cd577a50f9c81239931f1f793ee577bbd153c9abe363.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
06ab18fa67099bcfbcb9cd577a50f9c81239931f1f793ee577bbd153c9abe363.exe
Resource
win10v2004-20220901-en
General
-
Target
06ab18fa67099bcfbcb9cd577a50f9c81239931f1f793ee577bbd153c9abe363
-
Size
459KB
-
MD5
70ad19fdc12966e898db06eeccb5b43a
-
SHA1
f408039e09271a153ddca3cc7d32eef97a5711ba
-
SHA256
06ab18fa67099bcfbcb9cd577a50f9c81239931f1f793ee577bbd153c9abe363
-
SHA512
55e2b86961113b33b05cc5953ed490f3e4979fc03a7bc884bde9bda38973f684d1153ec5a60215f150d78cbf5dd1edf2564586c84a471f37d7fd1ee7eedfd167
-
SSDEEP
6144:ul874r9hLYbrItHBTjps2fNMcFKcju2ddqETHAdqfhk4Y8vsDLffvpX4lFr6/FfR:upBcrelNNL3a239HAdqp8KsXfWZIFZ
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
06ab18fa67099bcfbcb9cd577a50f9c81239931f1f793ee577bbd153c9abe363.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 375KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE