Behavioral task
behavioral1
Sample
aabbae810c4b2eb3df3fd4bc073d9c2f90c074fd5023e92214cc4db4701d68b2.exe
Resource
win7-20220901-en
General
-
Target
aabbae810c4b2eb3df3fd4bc073d9c2f90c074fd5023e92214cc4db4701d68b2
-
Size
168KB
-
MD5
0d23d06f8b6d67f8a307fc83f5a2f8a0
-
SHA1
c0db38b5c19d91c8bf2e2d73f9a7d7cd3a96974d
-
SHA256
aabbae810c4b2eb3df3fd4bc073d9c2f90c074fd5023e92214cc4db4701d68b2
-
SHA512
50b6d15d3423303c290c9329c8b278539e6f5311e24456a0f48c29a04acc92d5704f6c53c2e5c967acbefa4e7a3b79582f208493f4f158d3b5d97783ab83924e
-
SSDEEP
3072:/ROzoTq0+RO7IwnYZqjHgFgZ1nY/w/R0Vdt3UjUQAdQsBaeaE591lVYURgvhOW2:JkdNwB1jHznYoCVdO4QAdTaE591lxGOW
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
aabbae810c4b2eb3df3fd4bc073d9c2f90c074fd5023e92214cc4db4701d68b2.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 52KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rmnet Size: 113KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE