Behavioral task
behavioral1
Sample
539c565c69018421528136e0c236074118cd9e11190111214c725868d97288db.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
539c565c69018421528136e0c236074118cd9e11190111214c725868d97288db.exe
Resource
win10v2004-20220812-en
General
-
Target
539c565c69018421528136e0c236074118cd9e11190111214c725868d97288db
-
Size
255KB
-
MD5
0480c0b40bfb992f7d33c48b809891c0
-
SHA1
d2981e6d5da4ef511e4e6a41ebf2fdb3a1d4c831
-
SHA256
539c565c69018421528136e0c236074118cd9e11190111214c725868d97288db
-
SHA512
0d5d2820b2fa5435f1a97732aeb3dc7dd139487a0942bbf5d52eccd9e38d6e218674026c207b5701207a1200f8851d125322f5691c3732a0111844b9bcb0e130
-
SSDEEP
6144:ArosR2wzP49BQWwWXXxXix8a2PBx/dJf+sQoS6c:AlR2wDwQW/XJrPL/nlQoS6
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
539c565c69018421528136e0c236074118cd9e11190111214c725868d97288db.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 484KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 191KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE