?DllRegisterServer@@YAXXZ
Behavioral task
behavioral1
Sample
6717c6544fdaa7de29f59a51587dcf8c5af9ba5dc513aba227da3b790026c935.exe
Resource
win7-20220812-en
General
-
Target
6717c6544fdaa7de29f59a51587dcf8c5af9ba5dc513aba227da3b790026c935
-
Size
228KB
-
MD5
1657b2656501ed9a6618dd29faf744a0
-
SHA1
6146a0687b3d410a8ca36ac6db467a7dea087964
-
SHA256
6717c6544fdaa7de29f59a51587dcf8c5af9ba5dc513aba227da3b790026c935
-
SHA512
2a26ac55dea7b64215231673cc9345d7bc42d4f382b6912b7e921fc1078c6cec92c0671a8077f1dcf1d7af45ae46953963af5a7299504cd573aa4109aa7dab72
-
SSDEEP
6144:7LYrN5QIGKoNUR7mApkkliPYyPIePm4WAoSiD:PYRDo6R7mAakliP1voSiD
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
6717c6544fdaa7de29f59a51587dcf8c5af9ba5dc513aba227da3b790026c935.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 216KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE