Behavioral task
behavioral1
Sample
21672dbefb564ff74895299fcb4e4037f5d72b9a7020dea40cc1073cee04ec26.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
21672dbefb564ff74895299fcb4e4037f5d72b9a7020dea40cc1073cee04ec26.exe
Resource
win10v2004-20221111-en
General
-
Target
21672dbefb564ff74895299fcb4e4037f5d72b9a7020dea40cc1073cee04ec26
-
Size
448KB
-
MD5
1f1ae2d61b2ca8fdb0c42a7eba3047c0
-
SHA1
6b8312c9b632c41473d91fa606439dc9dbe54b81
-
SHA256
21672dbefb564ff74895299fcb4e4037f5d72b9a7020dea40cc1073cee04ec26
-
SHA512
47bbd9f5be9db4889e7a80228a47bb20ea2ea93cf25d86bded774e219f5fdf87fdb7ec14d30364bb5e0ba34f50b095b0a51b689279fbffe71ef0913dcbd7ff6a
-
SSDEEP
6144:VQthv2NeLHzhrjQ7NbMguSyn6I2Bn8ICWceKPnjJqgRra5hw1Bn/7Tld93/oS8:CIE/wc2a8UPjc5hwzn/7TjpoS8
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
21672dbefb564ff74895299fcb4e4037f5d72b9a7020dea40cc1073cee04ec26.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 360KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 78KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE