Behavioral task
behavioral1
Sample
d259a8c437662b99c46a4f6cecb9916012f662a0027cf97c056225717fa6328f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d259a8c437662b99c46a4f6cecb9916012f662a0027cf97c056225717fa6328f.exe
Resource
win10v2004-20220901-en
General
-
Target
d259a8c437662b99c46a4f6cecb9916012f662a0027cf97c056225717fa6328f
-
Size
235KB
-
MD5
352f8bdca3aa634983ff5a47277a0383
-
SHA1
a621ea3423ffc56deae6f9f0179fb5c6e8947440
-
SHA256
d259a8c437662b99c46a4f6cecb9916012f662a0027cf97c056225717fa6328f
-
SHA512
4a69e81f1bbffae82eda190fd13ca53d22ea6fc95b681618ef11d653de6ea025b8566ff5132f8264ef5429a9e04f2bdcfa7875e8f06380763a6d2db5f04d2c62
-
SSDEEP
6144:zCHNWjkg0Zb/6mKgvsxDAcBLZyBPPC16Wtu:Njkg0p/6mVU8aLgPPO6Wtu
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
d259a8c437662b99c46a4f6cecb9916012f662a0027cf97c056225717fa6328f.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE