Behavioral task
behavioral1
Sample
db0f2f96fcc6641337735ed16b4cdccbb7e187f9cfa353610db7834de41d85bf.exe
Resource
win7-20220812-en
General
-
Target
db0f2f96fcc6641337735ed16b4cdccbb7e187f9cfa353610db7834de41d85bf
-
Size
334KB
-
MD5
4de1dc6d35b0a42234cff58cb19e658a
-
SHA1
b85555b906caf8244aa36e486028445a40bc4aa7
-
SHA256
db0f2f96fcc6641337735ed16b4cdccbb7e187f9cfa353610db7834de41d85bf
-
SHA512
e9c8a121ce9eb8d56bf1fa8b05db3da31f088ff949cbca7740518165e26533d7a97d163d2c17bda67308528c26a1c3642c382870ed6cb0b1fd8d321f6b9b0469
-
SSDEEP
6144:b0SOUUWLdVzJE0KQmwuxsaKByqG0Ogj1+/SUf:YSOXW7zrKQvulb21+bf
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
db0f2f96fcc6641337735ed16b4cdccbb7e187f9cfa353610db7834de41d85bf.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 376KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 109KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 162KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.EUPX1 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE