Behavioral task
behavioral1
Sample
b19d388e4f940668d956daa8216eac5cac9abf12b4436dac3e5a75b6851bf9d3.exe
Resource
win7-20221111-en
General
-
Target
b19d388e4f940668d956daa8216eac5cac9abf12b4436dac3e5a75b6851bf9d3
-
Size
234KB
-
MD5
43c4dad983139deeca98c778e585f8c3
-
SHA1
19907d30db34c7d65f77ba9020574293ded9d629
-
SHA256
b19d388e4f940668d956daa8216eac5cac9abf12b4436dac3e5a75b6851bf9d3
-
SHA512
cf901105d8067f58be4410c9dee6e913bdca30bf67603a4f9f0c52285b3e8e79e98d2c0821f2da17fe93666a88ef09c3470e9a1e2bbcbfd15f73f7d895b53ad3
-
SSDEEP
6144:mFhji6OcPBB4vxiGHVnxq4s7+ufnyEwD62h1T50/qy8yEwoS:8fdgvxizp7+uz2DT50Cy8woS
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b19d388e4f940668d956daa8216eac5cac9abf12b4436dac3e5a75b6851bf9d3.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 508KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 229KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE