Behavioral task
behavioral1
Sample
aad02a860935899bf6da2611c469312620b678df8d9686ad3443ffb95d3b40aa.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
aad02a860935899bf6da2611c469312620b678df8d9686ad3443ffb95d3b40aa.exe
Resource
win10v2004-20220812-en
General
-
Target
aad02a860935899bf6da2611c469312620b678df8d9686ad3443ffb95d3b40aa
-
Size
229KB
-
MD5
689fb52cb3a88ff72a0a4b62a5364894
-
SHA1
d4eb9e596efcce0239a02864f05a670ee4a442ec
-
SHA256
aad02a860935899bf6da2611c469312620b678df8d9686ad3443ffb95d3b40aa
-
SHA512
f444250f56a4323ce14a0e753050f49fdd7df7e3760023e4ec8c1de78a6617a14d32ac7374e6d9f6b9266370ebef3e888d7d30ee0111d8d5ec11b81a99416be4
-
SSDEEP
6144:aWVYswlSqGARO8RPWTTfFpjYnqjvCa5b4:agYswIRLSODj2qz5b4
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
aad02a860935899bf6da2611c469312620b678df8d9686ad3443ffb95d3b40aa.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 226KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE