Behavioral task
behavioral1
Sample
holiday_ss2.exe
Resource
win7-20220812-en
General
-
Target
holiday_ss2.exe
-
Size
681KB
-
MD5
6b24e19ed28962b7e2b2d3a852182b87
-
SHA1
e6d3c0b5ed315caabca061d39c8d2bf59cd97b1f
-
SHA256
2fac4679ff3762523b28dd86ad77f7117c08fefc497471a3db69d2be962b2c32
-
SHA512
026c3927d7c40920fc3fe8922909528072330d1adc9af43aa52871f2f9d4a2b371e5c3432513f58057db055f48c511f248b42d810a3282f0fc719b3144590189
-
SSDEEP
12288:583ZWJGYqFNl7dN01X8qY38+0S5kQ9xMJfQAj+siZkAxJug43u3Q8wsTmvkUERhA:q3gGYelhN01X8qY38+P519eJfQAj9iZC
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
holiday_ss2.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 412KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 242KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE