Behavioral task
behavioral1
Sample
0c14217b6e53f68fee7a44c087c54ebe238bdbf3591b26829ca958529bac3458.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0c14217b6e53f68fee7a44c087c54ebe238bdbf3591b26829ca958529bac3458.exe
Resource
win10v2004-20220812-en
General
-
Target
0c14217b6e53f68fee7a44c087c54ebe238bdbf3591b26829ca958529bac3458
-
Size
792KB
-
MD5
65f402fe27ff844c3825a1ab03fdb119
-
SHA1
265df4b4dd50cce6945c7e4a130ad2cefe609daf
-
SHA256
0c14217b6e53f68fee7a44c087c54ebe238bdbf3591b26829ca958529bac3458
-
SHA512
1d84f11b202234f15cafc49f39522bf9097aaaa12c4fcf03285c2566428ac290db78358115f50caeaa094bd73da71bb9f7c8448cf88867e15c245a6c8306d715
-
SSDEEP
12288:oYvnlAnnyHpZP/gpoV09WUQaIaVXQCn+vwaV0R0RKnW6xmKaab3368:o2nhVVqWQIaVXQY+JV2nW4mKjT3B
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
0c14217b6e53f68fee7a44c087c54ebe238bdbf3591b26829ca958529bac3458.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 452KB - Virtual size: 452KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 326KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE