Behavioral task
behavioral1
Sample
987de2b71a767538e2c0dbe6d3c0aafc15018dadd3ed9af2a99b50baebe74165.exe
Resource
win7-20220812-en
General
-
Target
987de2b71a767538e2c0dbe6d3c0aafc15018dadd3ed9af2a99b50baebe74165
-
Size
249KB
-
MD5
9056d9b8035d426dee054bf960331050
-
SHA1
6e7cb287eef445ee0941eb9f95e869f9f5ed5562
-
SHA256
987de2b71a767538e2c0dbe6d3c0aafc15018dadd3ed9af2a99b50baebe74165
-
SHA512
6dfc9b31ee5d98e3f752e37e387a63fef480bffee187eb697910d6425a7afe06aee1e4f20b62338ecdbbddcd0f8db2e7225df9122165c583941114a89df37baf
-
SSDEEP
6144:gcpavHIfNXbXDLDN53LxG7onQgeK52UPTwY6:gcUvHIf9vDNzEoQM5DwY6
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
987de2b71a767538e2c0dbe6d3c0aafc15018dadd3ed9af2a99b50baebe74165.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gbditxm Size: 84KB - Virtual size: 84KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE