Behavioral task
behavioral1
Sample
cfb56c9262528352db5d94775cf508df59744ecbb40cbc625e73e21da77d9d49.exe
Resource
win7-20220812-en
General
-
Target
cfb56c9262528352db5d94775cf508df59744ecbb40cbc625e73e21da77d9d49
-
Size
1.1MB
-
MD5
1298125c219d67772aded45cdf6c9197
-
SHA1
40d853c51a3d4222da15230cf71c9e4a49954c94
-
SHA256
cfb56c9262528352db5d94775cf508df59744ecbb40cbc625e73e21da77d9d49
-
SHA512
50160072e99301481e81452f1a503108d9a88a00d6b0ecb70e16cdbd5d31bdc4b88477be6449cc573be4994d559de8ebfc224916551d66783eaeaf20aaa5cec8
-
SSDEEP
24576:CsYZVUnBz6NKPkOUqMhHiln753L+/T4rTN9qtFUP5MMws:uZuJ6bwYilnF3L+/T4rTqFUhMMh
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
cfb56c9262528352db5d94775cf508df59744ecbb40cbc625e73e21da77d9d49.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 600KB - Virtual size: 600KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 524KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE