General
-
Target
1104_2.7z
-
Size
4.0MB
-
MD5
bf9ec57a298ced992a0998814f706c61
-
SHA1
7ce151cae54ad0195a7e21d3fdcf6e17b09b967e
-
SHA256
132afd7d727596a40b443d2a194f55efaf7465f4a9f1c9b7951a05c6a3289035
-
SHA512
49f957987636e9b4c0492c058956693646e0462e4b8f0401e065069a423e38a0f9c05a98322b15d2507d057292b9d3d76ba047caf5e184cbb2691c1b08c4722e
-
SSDEEP
98304:5oSdTYem6khSonWLTli/KcrocwG9w8hIHhK7:5oGkem/UX9kzTwc1f7
Malware Config
Signatures
-
resource yara_rule static1/unpack001/5392915961.exe upx
Files
-
1104_2.7z.7z
Password: infected
-
5392915961.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 10.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.0MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE