Behavioral task
behavioral1
Sample
877e0d8d38d3f5f953eb5db2b68f94274b99a24152be0f9ac3d0c9c4e6cb66e1.exe
Resource
win7-20221111-en
General
-
Target
877e0d8d38d3f5f953eb5db2b68f94274b99a24152be0f9ac3d0c9c4e6cb66e1
-
Size
199KB
-
MD5
08f42206a9b8322178935e6416b7c2b0
-
SHA1
1d9b7b51604433f02c173ef39789e4fb098870b0
-
SHA256
877e0d8d38d3f5f953eb5db2b68f94274b99a24152be0f9ac3d0c9c4e6cb66e1
-
SHA512
cd74adf5e2a07a651a4649f23fcac5349351cdfcbfe6fc68a2b0dc6b037ea08c3053e200dc5a55081bf2f653cd03cc1121d0a21554a5d3dbbb23f715be84999b
-
SSDEEP
3072:Pkie6B4YdOUtspsQ0gngqyyWrWVVDwxEebZlqwJoSZGoc0ONblMK8xj3/:Phe1YdOZT/gqytridMwoTONblOj3
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
877e0d8d38d3f5f953eb5db2b68f94274b99a24152be0f9ac3d0c9c4e6cb66e1.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.2UPX1 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE