Behavioral task
behavioral1
Sample
fed1c14906cbba593c013d0ab7e169a646ee5e12aec0377fb4b56d820d6cd4d9.exe
Resource
win7-20220812-en
General
-
Target
fed1c14906cbba593c013d0ab7e169a646ee5e12aec0377fb4b56d820d6cd4d9
-
Size
64KB
-
MD5
6c696004c2758883d46a9db726e1bc03
-
SHA1
6e8f1c9f8c53d15660e7accf75c826fb0bebf837
-
SHA256
fed1c14906cbba593c013d0ab7e169a646ee5e12aec0377fb4b56d820d6cd4d9
-
SHA512
83450837741fe1b4ab463c9566289b30c6b3b90dd0b43fec84788ef5f452cfe66d5fa374d8cdc2336b7890b91da6c054449cf74353caf94164e6d0cb351138fc
-
SSDEEP
1536:72mtjfOn15YAifqnFVGcgWJA4oHLlJitW4v6v1t:7x5OncAif8FGW64ALTitW4v69
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
fed1c14906cbba593c013d0ab7e169a646ee5e12aec0377fb4b56d820d6cd4d9.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xyyyqby Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zacseza Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE