Behavioral task
behavioral1
Sample
db5a2500c14889d704c5e0068b9563e9ec37a19c8a411f9b789a556a088ee9b4.exe
Resource
win7-20220812-en
General
-
Target
db5a2500c14889d704c5e0068b9563e9ec37a19c8a411f9b789a556a088ee9b4
-
Size
188KB
-
MD5
53572331c47d206adcf27266be5746e2
-
SHA1
92bdfa0ea7e929ddfb4c0bcf3eeba4d02c5bbb0e
-
SHA256
db5a2500c14889d704c5e0068b9563e9ec37a19c8a411f9b789a556a088ee9b4
-
SHA512
8c6d8629101742246c2052f5a7414176bc0a030e00af94ebc8ae5f476c6ee36bceb67c0b11e359e6fbacf09aa408f6209e42004a312fa40b3c6549e3def7f720
-
SSDEEP
3072:Q8xPzK2JuF9DuT5fW0KD2fEP1guoutc+2vdCfEgl2Kl+jnVjRDd0LP3x77mUHUg:hEWuF9DuT5e0KifY13oSJ2vIMYyVldwV
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
db5a2500c14889d704c5e0068b9563e9ec37a19c8a411f9b789a556a088ee9b4.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 58KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE