Behavioral task
behavioral1
Sample
5aa8dd9cf9a70fb9b1b90a64c3d07e673cc285fe55ce3c7ebb422f0202ad8e25.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5aa8dd9cf9a70fb9b1b90a64c3d07e673cc285fe55ce3c7ebb422f0202ad8e25.exe
Resource
win10v2004-20220812-en
General
-
Target
5aa8dd9cf9a70fb9b1b90a64c3d07e673cc285fe55ce3c7ebb422f0202ad8e25
-
Size
46KB
-
MD5
84bd90e31cc673a0dc22622beb44c59b
-
SHA1
1e1bab8a543d35d6749aa9c2239e0a8bbe0da6f5
-
SHA256
5aa8dd9cf9a70fb9b1b90a64c3d07e673cc285fe55ce3c7ebb422f0202ad8e25
-
SHA512
2b6c6c3aad470655e458f20d98d8f8931dcee8cb87025150a3e0f420301a37031a1a42ca2d2ca5e37561a5727f36b167813ee2f2d538537faab861d0514e3c7f
-
SSDEEP
768:XL4XqYtVFkiBzLcFQHdoY6YRxYv04BLnpMU4HKzT9a/BMIdQ+j:749WSR9ofYRxYv0sLnpMU4HKzhUBMIdN
Malware Config
Signatures
Files
-
5aa8dd9cf9a70fb9b1b90a64c3d07e673cc285fe55ce3c7ebb422f0202ad8e25.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 192KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ