Behavioral task
behavioral1
Sample
22a8f93a825b42e6412c382e6b6b3fef540f6e58ec5dfdeac3a1f80295b90308.exe
Resource
win7-20220901-en
General
-
Target
22a8f93a825b42e6412c382e6b6b3fef540f6e58ec5dfdeac3a1f80295b90308
-
Size
224KB
-
MD5
64641240906830cd7f8e1403e0c092e0
-
SHA1
621b7ae9b4ef4c815ea90e18e0d40ed0776eef00
-
SHA256
22a8f93a825b42e6412c382e6b6b3fef540f6e58ec5dfdeac3a1f80295b90308
-
SHA512
ec48472065ff6bf108fed6d0cbfdccde93cd0642b7db643952ebb2319b7327c9d7779c6f28733e5273107e1817e33b7abedeb8def3a84dad2eddc2fb80c5a293
-
SSDEEP
3072:5ROzoTq0+RO7IwnYnwdgENWDc3EHmEOCQul34K8yI79HHKBr4BSFJy/snEYoMJL:HkdNwBAENmHmURoBTnw4BSFJy/MEM
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
22a8f93a825b42e6412c382e6b6b3fef540f6e58ec5dfdeac3a1f80295b90308.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 52KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rmnet Size: 169KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE