Behavioral task
behavioral1
Sample
dfd62cdecfcb28b659d3274f7b4a2c35cc6260b7f15f4dde366a187a143582e2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dfd62cdecfcb28b659d3274f7b4a2c35cc6260b7f15f4dde366a187a143582e2.exe
Resource
win10v2004-20220812-en
General
-
Target
dfd62cdecfcb28b659d3274f7b4a2c35cc6260b7f15f4dde366a187a143582e2
-
Size
255KB
-
MD5
4b985bafa1416efb17aa114558954b50
-
SHA1
9939a8a9854a7608c44e4e99eabaed9def23ad2d
-
SHA256
dfd62cdecfcb28b659d3274f7b4a2c35cc6260b7f15f4dde366a187a143582e2
-
SHA512
b6f041c3714d1da766594511595520217bfe0494ef7334e1bfad3747d68efd8f678190e09dc2a761307f683e37ef6e110055ee156b950646e33f6a726e99bd95
-
SSDEEP
3072:2HwLpnra0UYVQd++3aBjNlBdvS811jjdMG8hgSUUXERPrQPYzBcBwN:/L2ZKBjNl+GuXERjQKQwN
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
dfd62cdecfcb28b659d3274f7b4a2c35cc6260b7f15f4dde366a187a143582e2.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 492KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 128KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 126KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE