Behavioral task
behavioral1
Sample
1b95dafe1d4f519c7ae429914e6d3f933fbdd30af2485337382c73755e9c9b06.exe
Resource
win7-20220812-en
General
-
Target
1b95dafe1d4f519c7ae429914e6d3f933fbdd30af2485337382c73755e9c9b06
-
Size
111KB
-
MD5
458a306f1c3e0b4db1733b96865a61a0
-
SHA1
fc089d974d4cb0122937503dec05bfa1653bad5f
-
SHA256
1b95dafe1d4f519c7ae429914e6d3f933fbdd30af2485337382c73755e9c9b06
-
SHA512
9a00ed1332bdb40a9bc1988377d14cc25aef7a98897c78bfcb58ec5d00dd25760015f00b4fe907c09bf51c185ec7def9298974f391bad198b11fce172e714cbb
-
SSDEEP
3072:TROzoTq0+RO7IwnY8LjXHm+TmpMG7jCOF6CBry:1kdNwBtDHdGLfe
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
1b95dafe1d4f519c7ae429914e6d3f933fbdd30af2485337382c73755e9c9b06.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 52KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE