Behavioral task
behavioral1
Sample
64926ae1050636a4494456351f5ccbb34ac920167095ca55e48b28601628caf3.exe
Resource
win7-20221111-en
General
-
Target
64926ae1050636a4494456351f5ccbb34ac920167095ca55e48b28601628caf3
-
Size
199KB
-
MD5
964065c1a9f017b646a4bd6ab98f03f8
-
SHA1
84d22a0643d84621c5dace86a0f2477c9b051d20
-
SHA256
64926ae1050636a4494456351f5ccbb34ac920167095ca55e48b28601628caf3
-
SHA512
499a8659ba97e418cfb7fa11894a4d79d6f64e83d17ef835c03decdb7c51d3b06101995de474a7b0ab03d82846c721f60e2af0b91614df6b0a6e286a415eb3a7
-
SSDEEP
6144:qOdcQ/5T8HeP83ZmNvczKBXBC0lJqDoSr:qOj/5T8HePyemK1coS
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx
Files
-
64926ae1050636a4494456351f5ccbb34ac920167095ca55e48b28601628caf3.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 376KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 170KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE