Behavioral task
behavioral1
Sample
0c0a92850d4ac3793e6da59e0bf0efc44870a0d92cb58cf3fa719facbeac75c0.exe
Resource
win7-20220901-en
General
-
Target
0c0a92850d4ac3793e6da59e0bf0efc44870a0d92cb58cf3fa719facbeac75c0
-
Size
111KB
-
MD5
67773729e73f13747d958816f63db641
-
SHA1
affbaa5c6531af15f20a4c81830df3e2390278b4
-
SHA256
0c0a92850d4ac3793e6da59e0bf0efc44870a0d92cb58cf3fa719facbeac75c0
-
SHA512
5b9ede1f0054745b389898dde1ee13915b2f54630c1ec49d496dc10ccb773096fe54dc90f4d7f7bd771be11e136f79512ef30e3f90c5a113ea57f314f7cef282
-
SSDEEP
3072:TROzoTq0+RO7IwnYZPojng0teb9jz87Y:1kdNwBzjgie1A7Y
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
0c0a92850d4ac3793e6da59e0bf0efc44870a0d92cb58cf3fa719facbeac75c0.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 52KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE