Behavioral task
behavioral1
Sample
a5dbb94a10f636e2988440a23a28b87bdf1eb3acf5e4fe36abdb588ced6ebf42.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a5dbb94a10f636e2988440a23a28b87bdf1eb3acf5e4fe36abdb588ced6ebf42.exe
Resource
win10v2004-20220812-en
General
-
Target
a5dbb94a10f636e2988440a23a28b87bdf1eb3acf5e4fe36abdb588ced6ebf42
-
Size
875KB
-
MD5
c4ee28056ef7c1197c3aa1779254b0d1
-
SHA1
b9a8fb23d2c76919ecdb2084985246d5489a8ade
-
SHA256
a5dbb94a10f636e2988440a23a28b87bdf1eb3acf5e4fe36abdb588ced6ebf42
-
SHA512
384a4db1ea21471c810e2d84eb19162c8d182860b8c335476643bc57c998d7c65feef5fb0fd74e7c837c14511f35829beb0a97cf614f2c09fb33df0cb38423bb
-
SSDEEP
24576:EUcJgAVxGbVnLUKVqKTH8BGR9/d8SoZWnK3UPJQFSHrQEAz:nEjaV3qfBGR9/sIKkPJQFSHUEAz
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
a5dbb94a10f636e2988440a23a28b87bdf1eb3acf5e4fe36abdb588ced6ebf42.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 871KB - Virtual size: 872KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE