Static task
static1
Behavioral task
behavioral1
Sample
UPS 1Z1E31080372565980.cmd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
UPS 1Z1E31080372565980.cmd.exe
Resource
win10v2004-20220812-en
General
-
Target
UPS 1Z1E31080372565980.cmd.exe
-
Size
928KB
-
MD5
eaf8556f373e47066026977ae8924a02
-
SHA1
1e9e4bd736398e64391db945aead5d41b71bbc42
-
SHA256
1a0353868f82c688e13b205719e1cdde7a05c018662d364ea05df8038534aebc
-
SHA512
1bb4798fd0e6d901a4bd8ccbd17f30f70f73f4ebe2a06c3dde1fcc49180859a8b27e350e6dfab8ea98f7c31dd3c48293faa4897525105acdc983a71b50f7ff29
-
SSDEEP
12288:cmTb4ScxQiE2iNzpqAwtjgLvk+jrasr4CxBHE2NybtQGJm8V01:Hf+E1SAwFgLvr94UX4BQG88O
Malware Config
Signatures
Files
-
UPS 1Z1E31080372565980.cmd.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 925KB - Virtual size: 925KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ