Behavioral task
behavioral1
Sample
6d49b584683d08d2f390642beb64e3d5bc1087b6128c3dda08eacea8ad632062.exe
Resource
win7-20220812-en
General
-
Target
6d49b584683d08d2f390642beb64e3d5bc1087b6128c3dda08eacea8ad632062
-
Size
972KB
-
MD5
5fdc22f9ac5afb35e63c90f7cc38666d
-
SHA1
402fca8adb5cefac031acce4467ebe237deab359
-
SHA256
6d49b584683d08d2f390642beb64e3d5bc1087b6128c3dda08eacea8ad632062
-
SHA512
6a2fdb1bce2795778cfd69c0b150e30eee9398acdd9e88e20eb8d04c766c23925f27dae50eba64f40ca125516df9bd76d7c09b6139234a697cb4f97ed5068f70
-
SSDEEP
3072:/PigQTYHrQbQ+cVEwTMZpgITj+uAdS58UVMwout:/PigQowoS
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
6d49b584683d08d2f390642beb64e3d5bc1087b6128c3dda08eacea8ad632062.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE