Behavioral task
behavioral1
Sample
385b8afd6b0f093e0f14ec47974712f1651ddb31bec9d96d8d46c03003207d3e.exe
Resource
win7-20220812-en
General
-
Target
385b8afd6b0f093e0f14ec47974712f1651ddb31bec9d96d8d46c03003207d3e
-
Size
269KB
-
MD5
92930f77fcd43215e3b92434f14bc680
-
SHA1
5316eb7a863fcfd6fda95c5e9d364dd5b875348b
-
SHA256
385b8afd6b0f093e0f14ec47974712f1651ddb31bec9d96d8d46c03003207d3e
-
SHA512
bddf1feab8a38e1eec030696e1b2603e11ec87bd2ab0a66b3562166906bccfb04f2cc2f376671d9f420555ce76f9d0e4fdec44b1343471448399e4ced4c16deb
-
SSDEEP
6144:5I09c+ySK90zwjyZSJFjDqWq3lJnzXpZD8Ue7I0pyBy:5IF+ySK9+wjyiclJrpVhV0pyBy
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
385b8afd6b0f093e0f14ec47974712f1651ddb31bec9d96d8d46c03003207d3e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RUPX1 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE