Behavioral task
behavioral1
Sample
20ed30c62e2356c52071a5c0647c0d6cf9c49ddbed2eca590450980d4aab21bd.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
20ed30c62e2356c52071a5c0647c0d6cf9c49ddbed2eca590450980d4aab21bd.exe
Resource
win10v2004-20221111-en
General
-
Target
20ed30c62e2356c52071a5c0647c0d6cf9c49ddbed2eca590450980d4aab21bd
-
Size
894KB
-
MD5
1d651ef443cf394c5464d0618a508f80
-
SHA1
76a49bdc49cb972949751aada00986eacdc655b6
-
SHA256
20ed30c62e2356c52071a5c0647c0d6cf9c49ddbed2eca590450980d4aab21bd
-
SHA512
b47bb54c418ac365dd30947f11584d322fd68565af04285626911a6aa2da927855988d8684f2035080932e08cdcb94d36957406e493e31eaaa7c1b4774e2947e
-
SSDEEP
24576:PLi2VvAbtLtoD3vAF7kTdwMmdCET3zt+QbJB:PO2V26LvAF7kUdXTjt+Qb3
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
20ed30c62e2356c52071a5c0647c0d6cf9c49ddbed2eca590450980d4aab21bd.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 904KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 853KB - Virtual size: 856KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE