Behavioral task
behavioral1
Sample
1e8c7d0d52ee8513b6c718787dcd3fe96921de144fedb34a1e2eca4fe98e6c2d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1e8c7d0d52ee8513b6c718787dcd3fe96921de144fedb34a1e2eca4fe98e6c2d.exe
Resource
win10v2004-20220901-en
General
-
Target
1e8c7d0d52ee8513b6c718787dcd3fe96921de144fedb34a1e2eca4fe98e6c2d
-
Size
468KB
-
MD5
0db95324b206bf14eecc3deab2dff6be
-
SHA1
d54e6918a2371be1083583c32569b871cd589b71
-
SHA256
1e8c7d0d52ee8513b6c718787dcd3fe96921de144fedb34a1e2eca4fe98e6c2d
-
SHA512
f3dae524156469c4bc7e0d8c54034ff9472d19acc909f3681268385cd76d344ee98e7b63375b18a0894872dc81fdbae499716e7f4c51fb12dec36d8ba1eeba7f
-
SSDEEP
12288:36Wq4aaE6KwyF5L0Y2D1PqLMlbIiwb9pAbJZF:VthEVaPqLMRI2bl
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
1e8c7d0d52ee8513b6c718787dcd3fe96921de144fedb34a1e2eca4fe98e6c2d.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 472KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 264KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ifc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE