Behavioral task
behavioral1
Sample
80e6eb9ed700d9edf33bc613a67c51a2dd2776d09d1a48f6773bfee635fa38f9.exe
Resource
win7-20221111-en
General
-
Target
80e6eb9ed700d9edf33bc613a67c51a2dd2776d09d1a48f6773bfee635fa38f9
-
Size
275KB
-
MD5
9123f4e2c13fe0215da9c6c9ee040116
-
SHA1
6b7f5f474f3ddc5e36e78ca776e0a01d3da06954
-
SHA256
80e6eb9ed700d9edf33bc613a67c51a2dd2776d09d1a48f6773bfee635fa38f9
-
SHA512
d2978ab10a78f14c3b90c89e141cbd03e14e02edd11244cf3e9ebe08c6f6b0fb58e644a47928dba1bd73842ad164c2992bb3d07bd74a9d1da237afb2809bc246
-
SSDEEP
6144:jvfVN20OokSla3DoW/x0ESExlHfiyoSm+V7SWOGu:jXB7lazoy2E3HqyoSm+V7SjGu
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
80e6eb9ed700d9edf33bc613a67c51a2dd2776d09d1a48f6773bfee635fa38f9.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 484KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 192KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.4UPX1 Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE