Behavioral task
behavioral1
Sample
b1f739f8d5810d3e6dda3da41794aac9d7117b64713b6688b4ea043a1ef5a51a.exe
Resource
win7-20220812-en
General
-
Target
b1f739f8d5810d3e6dda3da41794aac9d7117b64713b6688b4ea043a1ef5a51a
-
Size
64KB
-
MD5
6864b6d2a1dbe9ca6a6891b8b9c7351d
-
SHA1
e05ecb68dc6302170a767572150ab4b730fa3aae
-
SHA256
b1f739f8d5810d3e6dda3da41794aac9d7117b64713b6688b4ea043a1ef5a51a
-
SHA512
55007b9c3ae973cd7fb964ee3c62b0754b4541d0dfcfe24c11d7c2c0c2d2543c5e80b69ef1344898a6f462be9a2a59d306067c17a35fc053bb5f58c8e63709f1
-
SSDEEP
1536:KHvW5buT+OW2/UfB56XsrNPnuYFIC3vcVJtojMevsnouy8rZ:mvABPQYB56X8mmJfcVQZEoutV
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b1f739f8d5810d3e6dda3da41794aac9d7117b64713b6688b4ea043a1ef5a51a.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
���� Size: - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 59KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���ˬ Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE