Behavioral task
behavioral1
Sample
d61b49240fb74bb767dabe23afe3803c8e938a709a8ede296f7a2671c2a711fd.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d61b49240fb74bb767dabe23afe3803c8e938a709a8ede296f7a2671c2a711fd.exe
Resource
win10v2004-20221111-en
General
-
Target
d61b49240fb74bb767dabe23afe3803c8e938a709a8ede296f7a2671c2a711fd
-
Size
387KB
-
MD5
0e7763b75cdbc4da3b7f0551c2dc1f9d
-
SHA1
1437e9884319228d5bfbd0d6750e9416b8fc1d2a
-
SHA256
d61b49240fb74bb767dabe23afe3803c8e938a709a8ede296f7a2671c2a711fd
-
SHA512
e085e31237750635c068fed0d1045d92774dadebd92cbfc6fb207c2946b7957dd5b23b20c067eca32990b26feb0e6c5052ed1a67b6d7a529aa85c65bd0a69a4c
-
SSDEEP
12288:NWWzzfSS7RjIARpEAWngrGMQ1fDACRdGrioSq:VRjIAMZMEbJa
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
d61b49240fb74bb767dabe23afe3803c8e938a709a8ede296f7a2671c2a711fd.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 528KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 349KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE