Behavioral task
behavioral1
Sample
c52a065371f8bc2d0be9c6fc9a76d7ae7cd10eee2f16be36c3c2648e574a5af9.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
c52a065371f8bc2d0be9c6fc9a76d7ae7cd10eee2f16be36c3c2648e574a5af9.exe
Resource
win10v2004-20230220-en
General
-
Target
c52a065371f8bc2d0be9c6fc9a76d7ae7cd10eee2f16be36c3c2648e574a5af9
-
Size
470KB
-
MD5
e26c56dca0387461f8c3e53046bbaef6
-
SHA1
c91c2a61f3280ea6c2be9905bf6e67163be0f33d
-
SHA256
c52a065371f8bc2d0be9c6fc9a76d7ae7cd10eee2f16be36c3c2648e574a5af9
-
SHA512
5ff1a47139a2a677c743b63bcbff70b03e82a2a6bf6bd31311b8874d64da69e79019f941d80bd21617e59084e7ddbecb2f430d9b52bb00902f00605a8e2d2783
-
SSDEEP
12288:+VBPgV8s+/e45Q43BUFsmYmmtJwbxGBlkB:+cV8N5QgsvhQwdelkB
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
c52a065371f8bc2d0be9c6fc9a76d7ae7cd10eee2f16be36c3c2648e574a5af9.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 608KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 449KB - Virtual size: 452KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE