Behavioral task
behavioral1
Sample
cff6067a8eb66c8915692633f161eee49c71aef0fbbee07a62a72e2e54030d4a.exe
Resource
win7-20220901-en
General
-
Target
cff6067a8eb66c8915692633f161eee49c71aef0fbbee07a62a72e2e54030d4a
-
Size
356KB
-
MD5
03a30fa390a4706ae17432095e68f887
-
SHA1
f91a3870945027ecda6e68eff3b2ddf88441246b
-
SHA256
cff6067a8eb66c8915692633f161eee49c71aef0fbbee07a62a72e2e54030d4a
-
SHA512
19cc603411784894fac5c93312f7418a3dac342942add52273f9827f3dcb8a66ea1a50288eb3b432354a7f3a3e4295d107e73073db89fee3a12889f6109e41a4
-
SSDEEP
6144:BfurLgmvI7Vb8hOkx5CSf7oYte13FwxrmM+GCQNRQAozJoSpgiQHsb0ZVAb:yAuU4rfxe1VpMT54ACoSpgium04b
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
cff6067a8eb66c8915692633f161eee49c71aef0fbbee07a62a72e2e54030d4a.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 259KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE