Behavioral task
behavioral1
Sample
f95a49a6e0a356204b4a11196c93382a3c082aa46514fdee9b1fe5670731e603.exe
Resource
win7-20220812-en
General
-
Target
f95a49a6e0a356204b4a11196c93382a3c082aa46514fdee9b1fe5670731e603
-
Size
752KB
-
MD5
6c2ce6f6ee9e2960ea4815f8e75f9a40
-
SHA1
76d6bcbecac20cad01960a43d5f2af153faab53c
-
SHA256
f95a49a6e0a356204b4a11196c93382a3c082aa46514fdee9b1fe5670731e603
-
SHA512
cc0b2ff4ea8928dab57b1576c706174edaba4866ecbe56b94cb8b91b287d42278f77b82b5c35a4b47d4200c4399c0396de8fb2e07902d57513cd02498c42e750
-
SSDEEP
3072:k5yU9nkjkbumccSJ5l/LUkXTpkiOY0R3iLv8J9out:IjDoS
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f95a49a6e0a356204b4a11196c93382a3c082aa46514fdee9b1fe5670731e603.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE