Behavioral task
behavioral1
Sample
8ff4121721dd75fb2aa7d9f2f4b24e64ed1d42c31d478ec79d6bb7c1c6d8c052.exe
Resource
win7-20220812-en
General
-
Target
8ff4121721dd75fb2aa7d9f2f4b24e64ed1d42c31d478ec79d6bb7c1c6d8c052
-
Size
219KB
-
MD5
0bf4c9c6acc148029572bf560949ac2b
-
SHA1
2e0f28e82f2a43211fb5f2f842d9d60c8f4f362b
-
SHA256
8ff4121721dd75fb2aa7d9f2f4b24e64ed1d42c31d478ec79d6bb7c1c6d8c052
-
SHA512
04b784da58211952d9bfad9baee2af0c3161521f346622e44ddd51fdf3a5f47062e4b9578f1ba98508a9f6b6a17ba1140b4967642494a23b5c684efb61af0b70
-
SSDEEP
3072:Poy8j7VnNdrPHaSekwi+mW+2KG1Clout:f8jZ7rvaU3+mWrbAoS
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
8ff4121721dd75fb2aa7d9f2f4b24e64ed1d42c31d478ec79d6bb7c1c6d8c052.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fCTa Size: 110KB - Virtual size: 112KB