Behavioral task
behavioral1
Sample
a170b4f94bf55349a850908583256bf54f9c51eda11d67dbf57ffef370a3d04c.exe
Resource
win7-20220812-en
General
-
Target
a170b4f94bf55349a850908583256bf54f9c51eda11d67dbf57ffef370a3d04c
-
Size
9KB
-
MD5
65d342b6c0cb12d2e803986878d44c1c
-
SHA1
669f07474a75e50853ff160fb87b08dcf86626cb
-
SHA256
a170b4f94bf55349a850908583256bf54f9c51eda11d67dbf57ffef370a3d04c
-
SHA512
06e178a4774fc452c225d817d11d2cebea6a19664f74a30d5c6adbcd258f0f2adf3ebab6b6fa4695418a986e92d20648010c378133ee0ce3a037dcb8e1bc28de
-
SSDEEP
192:nGupxebKOsmnMZbB4WWFaNJhLkwcud2DH9VwGfct1DO:nVtOBnMd4daNJawcudoD7U+
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
a170b4f94bf55349a850908583256bf54f9c51eda11d67dbf57ffef370a3d04c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE