Behavioral task
behavioral1
Sample
fd2658a7e96f5babb9efc15b7df7c10da1c25593b3f9ad9b36c6148037503117.exe
Resource
win7-20221111-en
General
-
Target
fd2658a7e96f5babb9efc15b7df7c10da1c25593b3f9ad9b36c6148037503117
-
Size
2.0MB
-
MD5
f1c647b4a3319a764fd6e8ed0ce85ff1
-
SHA1
900b636dc9e88874f72ff119315091a5cacf0452
-
SHA256
fd2658a7e96f5babb9efc15b7df7c10da1c25593b3f9ad9b36c6148037503117
-
SHA512
bd3e4aeb733dd7ef72ee58a55b1efae71bd6afa49e9fe3e5d49c1fac6f60c3beec77f6bf1d230d7e836d03f2bd6c119025189edcbb69ad783bc310f12db9accf
-
SSDEEP
49152:a1LwvJ8WH0S6nBiSlqo5ulwGULRbI2I4kk7Ykg8p3pxgN0:sIcNqlwJL1XLkvyp3peO
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
fd2658a7e96f5babb9efc15b7df7c10da1c25593b3f9ad9b36c6148037503117.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE