Behavioral task
behavioral1
Sample
aa27044d7df37b1cde967711f3506205f3e45fb10c3b5fb5a6eea4b8ef217afa.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
aa27044d7df37b1cde967711f3506205f3e45fb10c3b5fb5a6eea4b8ef217afa.exe
Resource
win10v2004-20220812-en
General
-
Target
aa27044d7df37b1cde967711f3506205f3e45fb10c3b5fb5a6eea4b8ef217afa
-
Size
460KB
-
MD5
61c38b9f18462ff0b586a3387be5a015
-
SHA1
d57a17cea4eb66517759dd47e8e00e681014c775
-
SHA256
aa27044d7df37b1cde967711f3506205f3e45fb10c3b5fb5a6eea4b8ef217afa
-
SHA512
b3ac24198133c82a5ef50f4139dc5bbb827a24e646e8761e8061f1ec7b8ad1f9b37b96bb59bbe9ecee6c74d2dc70e6dfcf32672719441b224caa8825a67b2b63
-
SSDEEP
12288:3qPGvpPn/R2ZAs5927QuXSTwoYlu0HJP:3o4Fn/R2ZZ5M7QsS0oYlfF
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
aa27044d7df37b1cde967711f3506205f3e45fb10c3b5fb5a6eea4b8ef217afa.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 372KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE