Behavioral task
behavioral1
Sample
cb71004e13facbe7d3166769106abc60cb230d3b814563d223db6d8185b31538.exe
Resource
win7-20220812-en
General
-
Target
cb71004e13facbe7d3166769106abc60cb230d3b814563d223db6d8185b31538
-
Size
386KB
-
MD5
f21830f3d5761d44b08cc89e60c5602c
-
SHA1
f085975ec84dba118c3118d34c6c434291ee2cf2
-
SHA256
cb71004e13facbe7d3166769106abc60cb230d3b814563d223db6d8185b31538
-
SHA512
04c2e0db856418c146b7c5be062567f3ebfce058f7d66ffc6b42b46888f34bb1bf61c27750beef7033f4f938eb7a703885e71bc80f14ab861ae62848473d51d6
-
SSDEEP
12288:hsPL06MFRXy73dIKH1M756ew7CoSMJnufSbOB:WT0Vi73Lc56eOfn8B
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
cb71004e13facbe7d3166769106abc60cb230d3b814563d223db6d8185b31538.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 500KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 292KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE