Behavioral task
behavioral1
Sample
a0ab5e4d4baa1e19d9b6c57be10794659fb476dee62cc05779f2179cb9c6b4fb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a0ab5e4d4baa1e19d9b6c57be10794659fb476dee62cc05779f2179cb9c6b4fb.exe
Resource
win10v2004-20220812-en
General
-
Target
a0ab5e4d4baa1e19d9b6c57be10794659fb476dee62cc05779f2179cb9c6b4fb
-
Size
602KB
-
MD5
61288d0c362291de1f2bb60b85e42c14
-
SHA1
b151eca91abbfc99b6f97c9ce8ac604598bb2088
-
SHA256
a0ab5e4d4baa1e19d9b6c57be10794659fb476dee62cc05779f2179cb9c6b4fb
-
SHA512
9de6e69c43ad38364e5c761d95e73f2215b54c7ae8dcc78f663ecda08afdc34f6686567832c48f4867e2774de8b5f84c1f3f3be2911db437c1ee9be5a5ed2197
-
SSDEEP
12288:NEphFsLRph9G9fHKZG9lbY0Dzkt+NmrjwwUo7MqPN23P2T/MoFbzg39n/ZJD:N2hFsh9G5quRDzkOmrjwToo5eT/MoFfk
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
a0ab5e4d4baa1e19d9b6c57be10794659fb476dee62cc05779f2179cb9c6b4fb.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 6.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 468KB - Virtual size: 472KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE