Behavioral task
behavioral1
Sample
4aac7e2fd9b36156bfb24ffe5a8f7cd1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4aac7e2fd9b36156bfb24ffe5a8f7cd1.exe
Resource
win10v2004-20221111-en
General
-
Target
4aac7e2fd9b36156bfb24ffe5a8f7cd1.exe
-
Size
1.3MB
-
MD5
4aac7e2fd9b36156bfb24ffe5a8f7cd1
-
SHA1
4108eb11bd5053435109cf39952db0d5874c9ce7
-
SHA256
c23e9175ebba0698ed7d701a9681fec1511b1e36e7436a4b18c4fa9f999881eb
-
SHA512
91292f2e88dd2f846edb2999111eed54abebcb223b29a1641bfcff378f8c0ea0037c599324290eb8b9a151323f8fdf259bbecf5414d904b3fca8393f3b206a5f
-
SSDEEP
24576:gh9caYn81lpuV5Kq8VQH7iaakcRs15s7o2CmVrLWkumLpEwlO:gh9cmpuV5Kqr7i/kv1u7o2BVMmLpVlO
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
4aac7e2fd9b36156bfb24ffe5a8f7cd1.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 37.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5.2MB - Virtual size: 5.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE