Behavioral task
behavioral1
Sample
b56dfb65365e475151b19c93b42d4782e91894b40bdfb3a01ae80f72368899d6.exe
Resource
win7-20221111-en
General
-
Target
b56dfb65365e475151b19c93b42d4782e91894b40bdfb3a01ae80f72368899d6
-
Size
961KB
-
MD5
1baed88240cf4edd2a0db6a27a0b5f7e
-
SHA1
b72f191fc7749989a386beeb8f93ccce0f08af7f
-
SHA256
b56dfb65365e475151b19c93b42d4782e91894b40bdfb3a01ae80f72368899d6
-
SHA512
3514bcd72ade563711effdd1f84a0849438b164aae1945be8e6a8c3d937dcc12080f6631584ec1bd605fc83c5d83045ac2e1ebb2e5502f2579fefb964dd0784c
-
SSDEEP
24576:OpzK55K1N77fdhLJ76IC5WLtNSGGKl6J92V7:M37/lpRC0NSpKoO7
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b56dfb65365e475151b19c93b42d4782e91894b40bdfb3a01ae80f72368899d6.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 722KB - Virtual size: 724KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 177KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.4UPX1 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE