Behavioral task
behavioral1
Sample
dd6beb65ce99439a3247363d8386fc6d9feb2b58ac70db1a3daf6e1bbbaf3043.exe
Resource
win7-20220812-en
General
-
Target
dd6beb65ce99439a3247363d8386fc6d9feb2b58ac70db1a3daf6e1bbbaf3043
-
Size
111KB
-
MD5
3d5955b0f495bce2476f8455b4834f20
-
SHA1
fd7891a8f5cb58ddc704d81bc5c2af3f0099d56f
-
SHA256
dd6beb65ce99439a3247363d8386fc6d9feb2b58ac70db1a3daf6e1bbbaf3043
-
SHA512
d24efe15bcb96f9e500a9547669943e8b484ab35a46724a713a468cb43120cb4ee5f112958fe521fdb883bd5d97f677b5020302a654110e4b4888162b6946565
-
SSDEEP
3072:TROzoTq0+RO7IwnY3BraWzzi4cXlRxyAU/TfL+:1kdNwBYLu46lfyt/f
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
dd6beb65ce99439a3247363d8386fc6d9feb2b58ac70db1a3daf6e1bbbaf3043.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 52KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE