Behavioral task
behavioral1
Sample
f80d1474a9f4e4d6a4cc1a9682f1268c3546c43569b11e6ab573cd85418571c2.exe
Resource
win7-20220901-en
General
-
Target
f80d1474a9f4e4d6a4cc1a9682f1268c3546c43569b11e6ab573cd85418571c2
-
Size
66KB
-
MD5
0fed1203839d24500267f4001b656aef
-
SHA1
a9d7efe9325187155e8791d28a448b58e39ecc4c
-
SHA256
f80d1474a9f4e4d6a4cc1a9682f1268c3546c43569b11e6ab573cd85418571c2
-
SHA512
ba034e02d32d66bd620df998af923a6eccac3cd0a65817d9ca6ce148f35713c51dd77285be06efc8a80d61e55f1e2cdc0b6072189027b40fd39f2ed0ef94a0b7
-
SSDEEP
1536:fprQAnWCc9TrzcTl/4ombNgVHGrqklPspsHKRTvhIfPeDECx:CCm7IoS/klPspaAvhiPeDE
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f80d1474a9f4e4d6a4cc1a9682f1268c3546c43569b11e6ab573cd85418571c2.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vmwmuhb Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE