Behavioral task
behavioral1
Sample
9e4165aa40b7f6f541a516a31691d9dd21142eb64cbe56a65b816a117b4d8788.exe
Resource
win7-20220901-en
General
-
Target
9e4165aa40b7f6f541a516a31691d9dd21142eb64cbe56a65b816a117b4d8788
-
Size
221KB
-
MD5
68bb139e1ef8c4531de311de2ce2e84a
-
SHA1
320185ea8ad4761df39ed9192e198a67e761a1d7
-
SHA256
9e4165aa40b7f6f541a516a31691d9dd21142eb64cbe56a65b816a117b4d8788
-
SHA512
6911014ec8c9ff4c86a2caf4fe4a10b355a133da8bebb786c4391dd57fd875bfbeeee920fe5f84ff8b0cbee79eb9aef3c97041c27f5bac3b97d65c7226a66215
-
SSDEEP
6144:MF8s+37ho7/Vzo1J7jOjLHqN2sbyjTW6MKhHaJQ1:MepoT5o1JEdscJMKlaE
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
9e4165aa40b7f6f541a516a31691d9dd21142eb64cbe56a65b816a117b4d8788.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.khe Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE