Behavioral task
behavioral1
Sample
a793855d58de32e3df816d7ffb19d8c7f1d88684111c522bcf91564c3c7f538d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a793855d58de32e3df816d7ffb19d8c7f1d88684111c522bcf91564c3c7f538d.exe
Resource
win10v2004-20220901-en
General
-
Target
a793855d58de32e3df816d7ffb19d8c7f1d88684111c522bcf91564c3c7f538d
-
Size
248KB
-
MD5
c26551e896964504ab85ac293e719e94
-
SHA1
8684c3b068077eefe91a25142f282f5418b37ca5
-
SHA256
a793855d58de32e3df816d7ffb19d8c7f1d88684111c522bcf91564c3c7f538d
-
SHA512
258e66ba00557a084ffb965e6b80e93a71f2e3d306176d484929871fa0bd62483782518c2f703bef963ec7a8e5cada6ecad4f69e4cc697e034795a2006955b84
-
SSDEEP
6144:zH3sll75HClbM07Yn99X+gWpy3JeCEMHdoS:zcl15HClwLPxWwwooS
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
a793855d58de32e3df816d7ffb19d8c7f1d88684111c522bcf91564c3c7f538d.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE