Behavioral task
behavioral1
Sample
5e6f256ffe16871d70db7ea1165c03b9822f1db8425b8d58b0259d7606557186.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5e6f256ffe16871d70db7ea1165c03b9822f1db8425b8d58b0259d7606557186.exe
Resource
win10v2004-20220901-en
General
-
Target
5e6f256ffe16871d70db7ea1165c03b9822f1db8425b8d58b0259d7606557186
-
Size
1.2MB
-
MD5
6fd228efa02c67562b00679da9f5fa6c
-
SHA1
40bc08c1db95dd8c59fc408c223c43a612f34599
-
SHA256
5e6f256ffe16871d70db7ea1165c03b9822f1db8425b8d58b0259d7606557186
-
SHA512
e14361bca2276e980e55be743837cb513b56fc051f9b6c5e8fe8a1fa316d6ae818d81766c56e85afe5f520424a680584b6ec56ee0a0aa90a7dce7465b64ddce8
-
SSDEEP
24576:BqVUSLQT07LNLNwnQaVhxoBu6y4Uq5T/dswzFa5/8PRmSGSvZD:BqVUSLQT07LNLNwnQaVhxoBu6y4Uq5rx
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
5e6f256ffe16871d70db7ea1165c03b9822f1db8425b8d58b0259d7606557186.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 960KB - Virtual size: 960KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 261KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE