Behavioral task
behavioral1
Sample
5ee000b0f4c765e9ef8237d32155a05490a3034a7c9357875a6ac79c518d2270.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5ee000b0f4c765e9ef8237d32155a05490a3034a7c9357875a6ac79c518d2270.exe
Resource
win10v2004-20220812-en
General
-
Target
5ee000b0f4c765e9ef8237d32155a05490a3034a7c9357875a6ac79c518d2270
-
Size
471KB
-
MD5
8449bebf237a7969a8c498663cb822e0
-
SHA1
689ce652b98a652dc0770c4af5d9dc178954351e
-
SHA256
5ee000b0f4c765e9ef8237d32155a05490a3034a7c9357875a6ac79c518d2270
-
SHA512
4ad8bc41e75d6d48dac3dafe5156f98225ce7bcafc477162b8c31cd312a08d7f359b027aae88e0bd1e59a1306c152378495583273ed7d65c47de7b43cc81e691
-
SSDEEP
12288:LWWzzfSS7RjIARpEAWngrGMQQODqujFpgMaRrz3/kgoS0:rRjIAMZMQDVT8RrLsr
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
5ee000b0f4c765e9ef8237d32155a05490a3034a7c9357875a6ac79c518d2270.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 500KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 444KB - Virtual size: 448KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE