Behavioral task
behavioral1
Sample
ed67069206aea8164ef88f450b0d1241f4b2d85021654a35ffcbdcc13a103402.exe
Resource
win7-20220812-en
General
-
Target
ed67069206aea8164ef88f450b0d1241f4b2d85021654a35ffcbdcc13a103402
-
Size
315KB
-
MD5
13c40073a879095fbc2327a908301636
-
SHA1
b4c78c9792520b7396afd8f678ce50ccdb651220
-
SHA256
ed67069206aea8164ef88f450b0d1241f4b2d85021654a35ffcbdcc13a103402
-
SHA512
e94ca7f2aacd0c67907f42586ef43d0296ae7227480fd4c138b8801e6ee11b2f2ebe48d4a5ded30f7b7af428a61de884d23ecdfd16b79ef4cc5a4ddc6ab69e3a
-
SSDEEP
6144:dxlZaFDLrItkluXRuBvusFjJemp8dqoOiEzfZigLyMXbSlgHKpMwEUVHt:XlQ8fXEBvuwjInnLEzRiAyMXbKAuVN
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ed67069206aea8164ef88f450b0d1241f4b2d85021654a35ffcbdcc13a103402.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 217KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RUPX1 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE