Behavioral task
behavioral1
Sample
dc28f317d4637235503e2f4d73da7cf6a4d41b416a7b40b85609551d7c7b8f0e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
dc28f317d4637235503e2f4d73da7cf6a4d41b416a7b40b85609551d7c7b8f0e.exe
Resource
win10v2004-20220901-en
General
-
Target
dc28f317d4637235503e2f4d73da7cf6a4d41b416a7b40b85609551d7c7b8f0e
-
Size
98KB
-
MD5
a4f3aa7a3156c5868f67ebd3941236db
-
SHA1
2703317968a601964940d982a4bd18c4009bb97c
-
SHA256
dc28f317d4637235503e2f4d73da7cf6a4d41b416a7b40b85609551d7c7b8f0e
-
SHA512
e1d901e48056f940029ada5c0c3718d96442ea0076cb431796ae962137349975bb461377390138106aec7e95ce309523af00b3d2b90b7f151d716cc3dde8a4f2
-
SSDEEP
1536:cOO9+ea3qO9LKh4Bea07IRIyjnwmrwtgfB2e:c8kYLrUa0Aymrwtgfr
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
dc28f317d4637235503e2f4d73da7cf6a4d41b416a7b40b85609551d7c7b8f0e.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE