Behavioral task
behavioral1
Sample
06ffda7aafcbf88625e3820851f5cb0b0a999bb1bf5b66436538103392eb7cb6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
06ffda7aafcbf88625e3820851f5cb0b0a999bb1bf5b66436538103392eb7cb6.exe
Resource
win10v2004-20221111-en
General
-
Target
06ffda7aafcbf88625e3820851f5cb0b0a999bb1bf5b66436538103392eb7cb6
-
Size
522KB
-
MD5
5403e9b59770a006bc55234a9ee70ef0
-
SHA1
2185d555e497f0af0ec5d3b190f21971c39c02c2
-
SHA256
06ffda7aafcbf88625e3820851f5cb0b0a999bb1bf5b66436538103392eb7cb6
-
SHA512
d9172d92dd5387967bd0f6877c0984eaa592c8d0b981653714ca42134871556ad68d7547ba4d92110076a4560749b5dac538dcc4f9aea7b78adb70a57cbf79d2
-
SSDEEP
6144:NYZTNk3D6LyUXwLLk+cR3qh0GQ43VJRD0ew+/UO85fsaESCYkALzKmXxoDsIGPia:NSNC80I+cR3R03VseuO85fPhVumuRGPp
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
06ffda7aafcbf88625e3820851f5cb0b0a999bb1bf5b66436538103392eb7cb6.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 380KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 78KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ebstipd Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yzemlvi Size: 58KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qhbyesd Size: 129KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE