Behavioral task
behavioral1
Sample
2bd13f3662b2f5b1902c8cc3698f41266f1620afff4eb4347b3608aab7dd72dd.exe
Resource
win7-20220812-en
General
-
Target
2bd13f3662b2f5b1902c8cc3698f41266f1620afff4eb4347b3608aab7dd72dd
-
Size
64KB
-
MD5
36191ddbe804ad96feffca9822c21abe
-
SHA1
843f1043da349f5fa4a25612d7b58e86b245c441
-
SHA256
2bd13f3662b2f5b1902c8cc3698f41266f1620afff4eb4347b3608aab7dd72dd
-
SHA512
5b1e8ca3bbb3323a8b3c45eb91b55d4e3ec9d6309ff266ef32a8f950fe96dd3158315881ff0fcf4339404d8361a8cfd55a86383459b958f458d7fda03d407373
-
SSDEEP
1536:w2mtjfOn15YAifqnFVGcgWJA6C8lORgg+h5UA0UU:wx5OncAif8FGW66C8lOX2UA07
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
2bd13f3662b2f5b1902c8cc3698f41266f1620afff4eb4347b3608aab7dd72dd.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xyyyqby Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nunmlsa Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE