Behavioral task
behavioral1
Sample
daf24d00b6efa9212fc60d1ac1f8793d451c74f476417d1b34b1bbd0a593f7b9.exe
Resource
win7-20220812-en
General
-
Target
daf24d00b6efa9212fc60d1ac1f8793d451c74f476417d1b34b1bbd0a593f7b9
-
Size
700KB
-
MD5
698656252e041326d600d84ed9f293b5
-
SHA1
578245a14aea4446d0099a10889f22ad481b2386
-
SHA256
daf24d00b6efa9212fc60d1ac1f8793d451c74f476417d1b34b1bbd0a593f7b9
-
SHA512
607ff5e1f5dba4f7a9dac6005ee3e125b71e8107ad34ce5666766a2a5c83f26ab699e5d4a576978752a9a49115625825dab9f1754401460c65423d93bd54e3c4
-
SSDEEP
12288:7KYp+xE+pravs/RFFCokLqbSDjUtXDOY4VZ19/VoSFbemREwFd7:2YrRs/RPkLqbS3MXDl6fr77
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
daf24d00b6efa9212fc60d1ac1f8793d451c74f476417d1b34b1bbd0a593f7b9.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 996KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 514KB - Virtual size: 516KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE