Behavioral task
behavioral1
Sample
160a54c6ab4e15ecf1ef29d6cbe87291ceb48283b42dd1503588eb6c23b13c54.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
160a54c6ab4e15ecf1ef29d6cbe87291ceb48283b42dd1503588eb6c23b13c54.exe
Resource
win10v2004-20220812-en
General
-
Target
160a54c6ab4e15ecf1ef29d6cbe87291ceb48283b42dd1503588eb6c23b13c54
-
Size
790KB
-
MD5
0fecc5881581f1c73114a0ab19848370
-
SHA1
bf04be05299f90c79955b6ed01665add7e0ad170
-
SHA256
160a54c6ab4e15ecf1ef29d6cbe87291ceb48283b42dd1503588eb6c23b13c54
-
SHA512
f2446878366bf73ba31dd172507e5e712fca0e4f6fdeca3c9c54087f6a4302f389400c995a1a5f699762d422158ab2148b151ca8fe42b8e0c0bde7e3dac67e67
-
SSDEEP
6144:jTnjnvrM3mjHGh5Doh9Z5cAea4Jv81E65f45c3zaFnJ9FrHiW:jHn438Hwerea2vEEvazaTb
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
160a54c6ab4e15ecf1ef29d6cbe87291ceb48283b42dd1503588eb6c23b13c54.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 372KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 187KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RUPX1 Size: 520KB - Virtual size: 520KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE