Behavioral task
behavioral1
Sample
5279d8bf11898ff921d0ec471995dea733311fc5ab6e8c77a77512599934e7be.exe
Resource
win7-20220812-en
General
-
Target
5279d8bf11898ff921d0ec471995dea733311fc5ab6e8c77a77512599934e7be
-
Size
27KB
-
MD5
20500268557f9ad6dafc78e6a11ad230
-
SHA1
c282226d5324456d84e66664993a6409f1930048
-
SHA256
5279d8bf11898ff921d0ec471995dea733311fc5ab6e8c77a77512599934e7be
-
SHA512
96b7f139ab27af90765865a8c887eed6ea0302cdeede05b44d394bcbc40f2d8025f40e3036ce718a1656c20e3adef6962dd4e5970cf29f755716e0b5b627dee2
-
SSDEEP
768:p+Aj5O+/Zh7oI6LDg02e9pzitFrswMJSLLb4M:TOEqIWgzeP+FyJab4M
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx
Files
-
5279d8bf11898ff921d0ec471995dea733311fc5ab6e8c77a77512599934e7be.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oli Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE