Behavioral task
behavioral1
Sample
d7558c94c93cd0da15df3b87aaa2ca8ecacf8f2ed0b6523e325e9ac118d1d768.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
d7558c94c93cd0da15df3b87aaa2ca8ecacf8f2ed0b6523e325e9ac118d1d768.exe
Resource
win10v2004-20230221-en
General
-
Target
d4a8c86cf5ce87c41b6b3a729cfc4e41.bin
-
Size
3.2MB
-
MD5
d80cbe9b1cc6666d2b69a3db2cdd3640
-
SHA1
06d7f60528230c65ed7ddb4dc756311e3d393b5d
-
SHA256
9e484924b37aad6ca7e84c41df09323b7565700fe1821ccfb62428e780d7047e
-
SHA512
43127ed4ac1e614a0c84190bb10d5100146dff7a6684e0a535209428915b3a0a717899c5f7c10c54aada9b0afe7a502b374f343606635b1e645d1025c1192199
-
SSDEEP
49152:Q6nLUwlcg37hNUBwpHAHABmL0mWSnJRh3pATBkibdFOGHq9N5SABgRfDHYro2kA0:Q4yM7h35Ac0zWkJ54BrbdzHqb5SA+VSC
Malware Config
Signatures
-
resource yara_rule static1/unpack001/d7558c94c93cd0da15df3b87aaa2ca8ecacf8f2ed0b6523e325e9ac118d1d768.exe upx
Files
-
d4a8c86cf5ce87c41b6b3a729cfc4e41.bin.zip
Password: infected
-
d7558c94c93cd0da15df3b87aaa2ca8ecacf8f2ed0b6523e325e9ac118d1d768.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 37.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5.2MB - Virtual size: 5.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE