Behavioral task
behavioral1
Sample
f013f2af6e887eb4916fd12d514219d1e64f55c352f06d805cb6e3db35c40e41.exe
Resource
win7-20221111-en
General
-
Target
f013f2af6e887eb4916fd12d514219d1e64f55c352f06d805cb6e3db35c40e41
-
Size
232KB
-
MD5
0224bfd4864986e8711cd515a6b82285
-
SHA1
a50c74a40443e4f4079ebd54019418a8a9012c08
-
SHA256
f013f2af6e887eb4916fd12d514219d1e64f55c352f06d805cb6e3db35c40e41
-
SHA512
21eda48c7ba29192275442717986fa891f57b46c05e3cb9c8dccb1b8a1b5327ae45d505d278df964284227383326b6c033b3bf9ac78508b12a28dd41bf723c56
-
SSDEEP
6144:ZjFy93LU92VxOtVflFud4TnxcpPTASCmqMorHwM5oSM:lFy9bPQZlFjrG0ZmYbwooSM
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f013f2af6e887eb4916fd12d514219d1e64f55c352f06d805cb6e3db35c40e41.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 496KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 227KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE