Behavioral task
behavioral1
Sample
f1ff080b86a71d337f9b45fbbb453afe06f2363c636eaa9b947efc9abd1c4e58.exe
Resource
win7-20220812-en
General
-
Target
f1ff080b86a71d337f9b45fbbb453afe06f2363c636eaa9b947efc9abd1c4e58
-
Size
348KB
-
MD5
3bbc20f0663cb120fa26ff224ae65d0a
-
SHA1
5bc17f01947bd681f68c5cdd30789c19fc5e16cd
-
SHA256
f1ff080b86a71d337f9b45fbbb453afe06f2363c636eaa9b947efc9abd1c4e58
-
SHA512
c12fc0f0a64bf20e842bd37929250e6209ababd487be7eb8bca158ede224eb05a9760f8cafa305a25872d11c0136ac2346f8a8e3502d096db3c1f5fcf706b6fd
-
SSDEEP
6144:JfurLgmvI7Vb8hOkx5CSf7oYte13FwxrmM+GCQNRQAozToSpxYeHhH4N2LP:aAuU4rfxe1VpMT54A4oSpWeHh7LP
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f1ff080b86a71d337f9b45fbbb453afe06f2363c636eaa9b947efc9abd1c4e58.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 259KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE