Behavioral task
behavioral1
Sample
ded518eaf27ad502abc6c96b9869140ac6f21542bbed9b79c6eb5e0dddb20cee.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ded518eaf27ad502abc6c96b9869140ac6f21542bbed9b79c6eb5e0dddb20cee.exe
Resource
win10v2004-20220901-en
General
-
Target
ded518eaf27ad502abc6c96b9869140ac6f21542bbed9b79c6eb5e0dddb20cee
-
Size
272KB
-
MD5
a86c86db44d8654a90bdf0bb3758e76c
-
SHA1
5c314968d4ecbb3bbe82cbcce38f98d75fc43182
-
SHA256
ded518eaf27ad502abc6c96b9869140ac6f21542bbed9b79c6eb5e0dddb20cee
-
SHA512
000ec40605d5bcb463317fb135caa209578ded96fbd60c0e8a66f2c7ce9642755772fd388cfd6a2a620cf212f222b1839bd8a5fa9fa8897dfbafab7461eb789b
-
SSDEEP
6144:m1db49+rEg024fpLZazEjvE/xMmS7TdGpnTwfyBWqSkOQm4bO2BaDmeBJe591:mjkArEN249AyE/xvSnEp8fyXOp4bO2/H
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ded518eaf27ad502abc6c96b9869140ac6f21542bbed9b79c6eb5e0dddb20cee.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 448KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 263KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE