Behavioral task
behavioral1
Sample
1e4c85583b06b86d5518b7d0eaa97f8c30e41b3f137b32725ac56e0485b266d7.exe
Resource
win7-20220812-en
General
-
Target
1e4c85583b06b86d5518b7d0eaa97f8c30e41b3f137b32725ac56e0485b266d7
-
Size
496KB
-
MD5
4585c495b07f2eebcf9d6c9db8f795c0
-
SHA1
a6499f290e53edac45183593f366b7488c3dc670
-
SHA256
1e4c85583b06b86d5518b7d0eaa97f8c30e41b3f137b32725ac56e0485b266d7
-
SHA512
dd2ab373532071e574fc74d1cc15928fabdfd7378194fdd2e69e564fe540953bbaee39b323680e9baca3cba09aba32b0f627c3a441f88c0917294bafd4ce4999
-
SSDEEP
6144:f57GN1ij/XjhP8sjfmH9q8id0cAXSSZd3fO1YZYX3Y/sv1Zau0TG2QBg+sKYP9G7:f572+XSHI0xbdyC0FvWHR9+zYPEghEWQ
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
1e4c85583b06b86d5518b7d0eaa97f8c30e41b3f137b32725ac56e0485b266d7.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 184KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 355KB - Virtual size: 356KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE