Behavioral task
behavioral1
Sample
aa4b253d3237c02a17c7da57de94c434.exe
Resource
win7-20220812-en
General
-
Target
aa4b253d3237c02a17c7da57de94c434
-
Size
186KB
-
MD5
aa4b253d3237c02a17c7da57de94c434
-
SHA1
90db2aa0ba4ba9e7b49c104550189dc88db2759e
-
SHA256
53b012f50264df3a5d5ba81f9db53c7e3fed433830300313631a56b1cd795e73
-
SHA512
2672bbfccd450a6992909f0a64079de785765351f47642c91d7b283567abc9addbdbb125892ad291ebb10c9e24129e2a58d000714a34fe39a063ad49f88b0a9a
-
SSDEEP
3072:IZx8gJscuAnU+JYoutueXl6BHfBGoVwqq29gvryVq98JD:m2AsnAnUJoScB4oVwh2qvryXD
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
aa4b253d3237c02a17c7da57de94c434.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 424KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE