Behavioral task
behavioral1
Sample
a1307571111cdae141394e9055a11ac454ce4b50549ee4007e18bec0c1ace5e0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a1307571111cdae141394e9055a11ac454ce4b50549ee4007e18bec0c1ace5e0.exe
Resource
win10v2004-20221111-en
General
-
Target
a1307571111cdae141394e9055a11ac454ce4b50549ee4007e18bec0c1ace5e0
-
Size
263KB
-
MD5
d50c7439f460917b1195959383d1aaad
-
SHA1
55ddcbd0fea781e47ac39c801ea5dce6eca442fd
-
SHA256
a1307571111cdae141394e9055a11ac454ce4b50549ee4007e18bec0c1ace5e0
-
SHA512
b8e534471733a87bd187b89af037daadaaa374b06b1356a12a3c3c8e1015885247f55f5fb7c948646bbb4584410b4f3b26bffb30e640cc82778bd914c287764d
-
SSDEEP
6144:YpgChRkmzl3f6hp1VByDCcMkLzImQ3sC0UJHG+4dJKwKt:IHhf9QnyDC4LzlQPJm+4PKwKt
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
a1307571111cdae141394e9055a11ac454ce4b50549ee4007e18bec0c1ace5e0.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 143KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE