Behavioral task
behavioral1
Sample
04694e5e78d0a3dcab0bfea22aa90cfe.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
04694e5e78d0a3dcab0bfea22aa90cfe.exe
Resource
win10v2004-20230220-en
General
-
Target
04694e5e78d0a3dcab0bfea22aa90cfe.exe
-
Size
539KB
-
MD5
04694e5e78d0a3dcab0bfea22aa90cfe
-
SHA1
bbc04877ba04814fa13800b42f6e8ea550967e2b
-
SHA256
88262a78ce91985653afffc74d9938050e56113840efbc67ee98eb9483fe1f22
-
SHA512
953a8df5135738fcda2e47b5f63e6ad626dada1f8485fd587997c38e307fe7bd34ccc5c0164f8c25dbbf63038ea126ef44445d31c4607731ba4a692524b13c9c
-
SSDEEP
12288:UdXvDWopdu11GNJGUOXOoDscvVqILhtgpiEg/ojnSFRsQOoS9cwMd:gv6oLM2GvXOoHdqIdsg/ojn4sQ9S9c1
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
04694e5e78d0a3dcab0bfea22aa90cfe.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 864KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 537KB - Virtual size: 540KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE