Behavioral task
behavioral1
Sample
1ca6d5b2e421c34bbf52f3f3dd7c60a0fc99fc7017a941d57787d4bff8d2a88c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1ca6d5b2e421c34bbf52f3f3dd7c60a0fc99fc7017a941d57787d4bff8d2a88c.exe
Resource
win10v2004-20220812-en
General
-
Target
1ca6d5b2e421c34bbf52f3f3dd7c60a0fc99fc7017a941d57787d4bff8d2a88c
-
Size
215KB
-
MD5
3b6a39ffe69618a1e59e0e6185eae9f0
-
SHA1
025db9192028565fd45eb67a68707126fa83e88d
-
SHA256
1ca6d5b2e421c34bbf52f3f3dd7c60a0fc99fc7017a941d57787d4bff8d2a88c
-
SHA512
03cfff803be4f537dcbb41dbe5b0f4567388d8590bc30209d2f03a365387914a04226aa9efe7de7d57396f3f238a8feab8a2830312ef9c51309ecb0c434c60de
-
SSDEEP
3072:v2HzvOOfwjdbsCOJHMhVDNY4WaNm5sPrGmKMReGRoutNr6+A7:veOOfkbsNBqtWaNm59oRoS4+G
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
1ca6d5b2e421c34bbf52f3f3dd7c60a0fc99fc7017a941d57787d4bff8d2a88c.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 178KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE