Behavioral task
behavioral1
Sample
601897737E1E068932842F85F0564CA2.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
601897737E1E068932842F85F0564CA2.exe
Resource
win10v2004-20230221-en
General
-
Target
601897737E1E068932842F85F0564CA2.exe
-
Size
176KB
-
MD5
601897737e1e068932842f85f0564ca2
-
SHA1
c122f3de2052054a4e2475640bab342328e54f9a
-
SHA256
89d3bd1e70583f85dde42e9b287e042980293e1ab3a8777cb6626d6d3def4d0e
-
SHA512
269340628a3bb6953cbc3cbd725ba8dd0cf8fc1e393e1c68bb3228c4576868660190fb4414952bad2358932e32f87bdd11fb9953b23aa39caaf7a1850af28c9b
-
SSDEEP
3072:g7/9ytf9Qo0eV22B8nYo6gBJo9UTsVZrW9iV3XNZD6tJRdH1Kkpw8UU+6:g7/a9QvC6po7VVW9+811hpxUN6
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
601897737E1E068932842F85F0564CA2.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 248KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 174KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE