Behavioral task
behavioral1
Sample
ac8cda492fc7b918f3d935f2628d041de14a5cc9c1000502ae83d616201d3a99.exe
Resource
win7-20220812-en
General
-
Target
ac8cda492fc7b918f3d935f2628d041de14a5cc9c1000502ae83d616201d3a99
-
Size
615KB
-
MD5
42c570b8d50ad9a41a28c3efea858050
-
SHA1
60b380e712810409efb35f61810cf8b4b88dfa07
-
SHA256
ac8cda492fc7b918f3d935f2628d041de14a5cc9c1000502ae83d616201d3a99
-
SHA512
df18d06bf675f4e2d515427c2eef0f85e2960e33647e0b257877a6dbee196512f1b3143c1d8242a71fa2af95997392d47d37c036bad7ed1be548570fc204b55d
-
SSDEEP
12288:Xe+t8c1wdHWEOhbvXNyMy9QJOHMv8tnWI0oZrcIRF/rSQHLXK2XnQ2Dk:XpOd0bvwGAeoZ4Y/WkLabWk
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ac8cda492fc7b918f3d935f2628d041de14a5cc9c1000502ae83d616201d3a99.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 800KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 430KB - Virtual size: 432KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 59KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
urbszei Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE