Behavioral task
behavioral1
Sample
db70dee50f7e325b6604fed280a028d5cd4f24e339828de4763206d6b0fb0b89.exe
Resource
win7-20220901-en
General
-
Target
db70dee50f7e325b6604fed280a028d5cd4f24e339828de4763206d6b0fb0b89
-
Size
65KB
-
MD5
086ee0fcd77e7214180ab40e674cce4f
-
SHA1
56168bb820c8f81e8f85109ece6b2b259d970232
-
SHA256
db70dee50f7e325b6604fed280a028d5cd4f24e339828de4763206d6b0fb0b89
-
SHA512
1bbfff920c4bfaca905c01b5950cd6ac52ec09a6f6286471096f7aa36242e0d1e993a3265f8f705f38c7172b654c4cbc7aea13f4666ac96d0472db580d239c6d
-
SSDEEP
1536:Y28NEt9N6alinZnouy8JRgIQKVMlteU7ItM:b8NEHwOiJoutJRgIQPzL02
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
db70dee50f7e325b6604fed280a028d5cd4f24e339828de4763206d6b0fb0b89.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nzrheoh Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE