Behavioral task
behavioral1
Sample
4d9ddb1e10a40ab3b76c005dc8651feb0a5f428430cd0c1be98a2737ec4c9210.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
4d9ddb1e10a40ab3b76c005dc8651feb0a5f428430cd0c1be98a2737ec4c9210.exe
Resource
win10v2004-20230221-en
General
-
Target
4d9ddb1e10a40ab3b76c005dc8651feb0a5f428430cd0c1be98a2737ec4c9210
-
Size
82KB
-
MD5
f003a638234ce81336adf78da10b7fcf
-
SHA1
c5142a210cf93bf73ecaa0dec6d881ac1d1edf71
-
SHA256
4d9ddb1e10a40ab3b76c005dc8651feb0a5f428430cd0c1be98a2737ec4c9210
-
SHA512
67683339e350a1ea0600ca641c7506a76fc70e4aa01829014baa0f9ffabf102a0a03b1457651b0b92443c87122c1a8405349a939ef53bcd466752850f74fb129
-
SSDEEP
1536:gBpk4rtVLTSXYNoYi+n9QrGkRNVcmVUsSYAJ6fwq07Zwp:gBpk4rnTSm5W6gcAUsbAJ6T
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
4d9ddb1e10a40ab3b76c005dc8651feb0a5f428430cd0c1be98a2737ec4c9210.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 80KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE