Behavioral task
behavioral1
Sample
b76da23dea67bc4cb0823850db8c8c026d72d518d69927ca989635b7fdec3c4f.exe
Resource
win7-20220812-en
General
-
Target
b76da23dea67bc4cb0823850db8c8c026d72d518d69927ca989635b7fdec3c4f
-
Size
107KB
-
MD5
6e85d7a76a192004c52c329fbae1009f
-
SHA1
a913a5763fabf5502e931439d9e1fa77d6e967dc
-
SHA256
b76da23dea67bc4cb0823850db8c8c026d72d518d69927ca989635b7fdec3c4f
-
SHA512
aa3841e00bdbc37b2072ff913d73e2853048d175a26155caf77621f853d97f6b235bc0e3cb34cb7a286cc8816a87bfa5130fcab4d7e8d370080b388898fba7be
-
SSDEEP
3072:Vb3txnVZhJVsb2GYA2dJrnk07qYiQSLD0GGm1N:ZLDVKYzFkYiQSnm8
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b76da23dea67bc4cb0823850db8c8c026d72d518d69927ca989635b7fdec3c4f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.TUPX1 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE