Behavioral task
behavioral1
Sample
f396dea89491020b33c3ca9b4f450b498a7907c90d0a4faa6fcc6861aabe28ba.exe
Resource
win7-20220812-en
General
-
Target
f396dea89491020b33c3ca9b4f450b498a7907c90d0a4faa6fcc6861aabe28ba
-
Size
84KB
-
MD5
934adf4ba6e72110327e94c71fbbce5d
-
SHA1
d2b82e71b223ef14ceec6cfecd59547e0a0653b7
-
SHA256
f396dea89491020b33c3ca9b4f450b498a7907c90d0a4faa6fcc6861aabe28ba
-
SHA512
6b43cdd28e6e3df5a9f13b5dc9267de9f2e5034ef06fc0cc598f1898d5fd7c6e9b814ba483bb64eab6db1aa081f299e8905ba52e3e3d05fe8077264034a5854f
-
SSDEEP
1536:tWt7COYCBujIMs8JnqbtE1wNzgGOCW8aG1rryDfcgm7vimo300CQ:tm+ORBusMNqbEGg8ayrsvmrobb
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f396dea89491020b33c3ca9b4f450b498a7907c90d0a4faa6fcc6861aabe28ba.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.LUPX1 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE