Behavioral task
behavioral1
Sample
defe4b952f68fb86f8653b6b1bfe00946a71decae53d1a39ef167c5405692467.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
defe4b952f68fb86f8653b6b1bfe00946a71decae53d1a39ef167c5405692467.exe
Resource
win10v2004-20221111-en
General
-
Target
defe4b952f68fb86f8653b6b1bfe00946a71decae53d1a39ef167c5405692467
-
Size
378KB
-
MD5
6da31959806aa7f4b88e074ddffaeef2
-
SHA1
301f8ce50830cd43452027eb71c21218aa56997a
-
SHA256
defe4b952f68fb86f8653b6b1bfe00946a71decae53d1a39ef167c5405692467
-
SHA512
b703da8cdca12730e974cc0e69e24239ceef4a9801b67b30adec3aadb1779172b3dd580a325f2c3cdbb700294deda3cc90ee712ba2b91868371e0d09554483f3
-
SSDEEP
3072:Qp0bj5nWykF/nUpYd7wsEzP6+tCY8SpHdUGTf4ukxN:EK5nWFT18N7JH5s/
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
defe4b952f68fb86f8653b6b1bfe00946a71decae53d1a39ef167c5405692467.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE