Behavioral task
behavioral1
Sample
16f508f86537fb1ba494d285aa71f6ab54db8973721e1934c8e6f87f848a7a76.exe
Resource
win7-20220812-en
General
-
Target
16f508f86537fb1ba494d285aa71f6ab54db8973721e1934c8e6f87f848a7a76
-
Size
176KB
-
MD5
a381bbcd2c0f9816280eb7fba4d8a722
-
SHA1
b89d300f5f67c18d04764d7e5e54a451473da0e2
-
SHA256
16f508f86537fb1ba494d285aa71f6ab54db8973721e1934c8e6f87f848a7a76
-
SHA512
1ecffc5c3c4ec48238679c4c280c58429f63cefdb3a3a86cf53273045acf1ea8a6d6bfffd2863d00908787b86dd4200352995f2b7e54fb86127aa5233d3eb0bd
-
SSDEEP
3072:qCZzIQZk9fN8RjurfgV9FHleGtOufEa4+kmNj:qCZkykQRjhV3HleIOuNPp
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
16f508f86537fb1ba494d285aa71f6ab54db8973721e1934c8e6f87f848a7a76.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 176KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 119KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ghpvuak Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE