Behavioral task
behavioral1
Sample
b99ca1b350246a8af73b67760f1ec0ae50a657debfb0bcd8205eddda90ff4990.exe
Resource
win7-20220812-en
General
-
Target
b99ca1b350246a8af73b67760f1ec0ae50a657debfb0bcd8205eddda90ff4990
-
Size
203KB
-
MD5
0ca30037414ed0b255173159bf951d40
-
SHA1
1a12040c371d50b1370fec0e469aa7fdbb3b5a30
-
SHA256
b99ca1b350246a8af73b67760f1ec0ae50a657debfb0bcd8205eddda90ff4990
-
SHA512
11e4625c911ac85abf58eedd02c77a210953cd585b974befbaba31e4b95af8b4216f0e702ec5d63a13b91ff3399eb6f230940c6ca52baa5e6a74dc4b54d98f6f
-
SSDEEP
3072:enhT+Yzw6NmQyq6ECIUCkXmFoR2Zwrt5vgtlXGRAkCsB/9QpjC1yD:enhTZc5W6F4wrbgtlXGRim9OD
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b99ca1b350246a8af73b67760f1ec0ae50a657debfb0bcd8205eddda90ff4990.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 202KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE