Behavioral task
behavioral1
Sample
bfab2d66eadc441de8727159470aa7e9c7e687499f99e30900ce649be4bf37e4.exe
Resource
win7-20221111-en
General
-
Target
bfab2d66eadc441de8727159470aa7e9c7e687499f99e30900ce649be4bf37e4
-
Size
136KB
-
MD5
6366483023d16f01169f69a1a80686c0
-
SHA1
9be45dae1ffce03c7d7e172ab46dfacd605a2a44
-
SHA256
bfab2d66eadc441de8727159470aa7e9c7e687499f99e30900ce649be4bf37e4
-
SHA512
6352be4df44129b970666c6292f1c28e2eb03f18853b23cfb73cb9e6f9ba8daa554e6be7eeb466d35615d68791fe4a1e554c6112f608615e08160d2deb9ddc01
-
SSDEEP
3072:roNoqyco/9ohG/u9/GfIN912z3hlF0CLd6DFUh1q7Bp:kNoqNoShGSsIx2z3hlFlMDFUh1eP
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
bfab2d66eadc441de8727159470aa7e9c7e687499f99e30900ce649be4bf37e4.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 59KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.7UPX1 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE