Behavioral task
behavioral1
Sample
6c0f60ec55aa0c2a983146b86e6f2db970c772440b19221e0cdbc6d4170bcead.exe
Resource
win7-20220901-en
General
-
Target
6c0f60ec55aa0c2a983146b86e6f2db970c772440b19221e0cdbc6d4170bcead
-
Size
144KB
-
MD5
8d65a644456c3a462f6cbb35b996f790
-
SHA1
5eadc783ad28e06ab773d85d3bdc8054a39f3133
-
SHA256
6c0f60ec55aa0c2a983146b86e6f2db970c772440b19221e0cdbc6d4170bcead
-
SHA512
af4f088fc31ebedac9e93687bc7e7ceffaec2b26e46d543bb1939e5ad18dd4e29d3fa5c06ea252635074647b3be9239211f455ef501f19514009decaa47e65b8
-
SSDEEP
3072:ZdrFfS7mSxmDqVekUKSsq8jE+YHNDLJuHppoB:ZdJfXSxDenGq8jdyNDLqp
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
6c0f60ec55aa0c2a983146b86e6f2db970c772440b19221e0cdbc6d4170bcead.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
avksadb Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE