Behavioral task
behavioral1
Sample
6da8f3bfc4c22f80a8ecfba1b95aacba7176fe68300960b619a96c58d4575e0d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6da8f3bfc4c22f80a8ecfba1b95aacba7176fe68300960b619a96c58d4575e0d.exe
Resource
win10v2004-20221111-en
General
-
Target
6da8f3bfc4c22f80a8ecfba1b95aacba7176fe68300960b619a96c58d4575e0d
-
Size
243KB
-
MD5
2323307aaacb5f1393c39bce7e4bed00
-
SHA1
82156a39116a3dafb3547c5398a2d365348bccd9
-
SHA256
6da8f3bfc4c22f80a8ecfba1b95aacba7176fe68300960b619a96c58d4575e0d
-
SHA512
1a678cc20ab67efcf90ff217e86549a0b4edbcfe735ca997ff20b824cdcb2751f78809549b312fb849efcebd65802cf318d44551a5fe8c1dae1ab5e4bb872bdf
-
SSDEEP
3072:R06TPH0SrN3IHDGKGR9oKpPCR3lH1akXDMOEkXy0fgHOy7IZWIt/Te83bO:nrN3IHDGKy95pe3lMy/EA2uugt7e83bO
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
6da8f3bfc4c22f80a8ecfba1b95aacba7176fe68300960b619a96c58d4575e0d.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 492KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 117KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE