Behavioral task
behavioral1
Sample
6d95fefaa9f3e9bdbbb654ab57f9b0dc12564bdc263f9979a7dc17c5257fd902.exe
Resource
win7-20220901-en
General
-
Target
6d95fefaa9f3e9bdbbb654ab57f9b0dc12564bdc263f9979a7dc17c5257fd902
-
Size
203KB
-
MD5
38fbb2388ae221d8e55f20578e8fc923
-
SHA1
88fd173aaedc47acbfffddcbdc23bc849cbc347c
-
SHA256
6d95fefaa9f3e9bdbbb654ab57f9b0dc12564bdc263f9979a7dc17c5257fd902
-
SHA512
b50f1b7395cce8a513508d0be30167e9ea215ee9747280d573b38aaa229d096caeeb5be15f46d04717f17648631c3e03dc251492190b4fbb4ab2c743395804a2
-
SSDEEP
3072:GayQNcz+zoYYYYmY/fr+Rsk3V6shKX5BJX5UuA9Cu0Nj:Nyxa/Y/fr+ikF6kSVRRNj
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
6d95fefaa9f3e9bdbbb654ab57f9b0dc12564bdc263f9979a7dc17c5257fd902.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 72KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE