Behavioral task
behavioral1
Sample
9ecccd3585e22270ac2cca1c44cc02d615168ea3a66d3e00fdc77d2aaa7d7c02.exe
Resource
win7-20221111-en
General
-
Target
9ecccd3585e22270ac2cca1c44cc02d615168ea3a66d3e00fdc77d2aaa7d7c02
-
Size
896KB
-
MD5
096fc5dcfe4cd085c7b2603a5f5cd5f0
-
SHA1
e4aac7150388f7866f3257d7bcc0dd32696138a0
-
SHA256
9ecccd3585e22270ac2cca1c44cc02d615168ea3a66d3e00fdc77d2aaa7d7c02
-
SHA512
e9c7bdd68bca7459298657c81b3476e8a37ae8f0c0ff5db1a589edada1958b043831e19920d91b407255a7ddbe95ba5b0f02a2020a91f17e15cf176a446de4be
-
SSDEEP
24576:GScgU5obevWpo2oZzaIS5UnrqePhSHAH:GXsbeui25vGnrqyIA
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx
Files
-
9ecccd3585e22270ac2cca1c44cc02d615168ea3a66d3e00fdc77d2aaa7d7c02.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 444KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 228KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 585KB - Virtual size: 587KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
recqagy Size: 80KB - Virtual size: 80KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE