Behavioral task
behavioral1
Sample
bf6a511f68cc47f6f56bcba94b08094aab06555f7b8bffd091c43fec6f6cbe96.exe
Resource
win7-20220901-en
General
-
Target
bf6a511f68cc47f6f56bcba94b08094aab06555f7b8bffd091c43fec6f6cbe96
-
Size
945KB
-
MD5
90da3bed0c28a487716967cd5a60a669
-
SHA1
1a2c4e038436ccfc1ec875217146a090ed3fbf05
-
SHA256
bf6a511f68cc47f6f56bcba94b08094aab06555f7b8bffd091c43fec6f6cbe96
-
SHA512
3c547937b9e08519d70e6f3063b33132e5c02a4987c41b246f3a4b932c567e54a68c9c86507910a68827b7d8698f401980dcdc65bddaf0c902555877eaa494e3
-
SSDEEP
24576:3oHg+MjeWiob2TlJEOvdFLxvF5HkyrfEVctU4/Xq6nY:3P+MjeboyT3Eczx96yLEVctU8X5Y
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
bf6a511f68cc47f6f56bcba94b08094aab06555f7b8bffd091c43fec6f6cbe96.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 900KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 827KB - Virtual size: 828KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE