Behavioral task
behavioral1
Sample
b28a871e9e3b968b3583fb23b3a597d353345978395412388f36a5e377bc549c.exe
Resource
win7-20220901-en
General
-
Target
b28a871e9e3b968b3583fb23b3a597d353345978395412388f36a5e377bc549c
-
Size
1.7MB
-
MD5
93ab6ea64698b25e730d4fbafb6830d4
-
SHA1
89d8a425af823fd3da9398479aaee5eb5f5ea54a
-
SHA256
b28a871e9e3b968b3583fb23b3a597d353345978395412388f36a5e377bc549c
-
SHA512
143a293cdcc0084395251df9d9cc23db254f3de04e92cc6b7f763c1f6d7d019f4fcf3b0f536bf64c817d3be9d24db296254d73e0bf358ac6e7e9e181dade5e28
-
SSDEEP
3072:/PigQTYHrQbQ+cVEwTMZpgITj+uAdS58UVMwout:/PigQowoS
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b28a871e9e3b968b3583fb23b3a597d353345978395412388f36a5e377bc549c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE