Behavioral task
behavioral1
Sample
b1e8a916dad57f42fc95874248de402ac9e37023a7b97da448fd354d475ceb50.exe
Resource
win7-20220812-en
General
-
Target
b1e8a916dad57f42fc95874248de402ac9e37023a7b97da448fd354d475ceb50
-
Size
1.1MB
-
MD5
6b799f21a8aebee48a85225a324cde6f
-
SHA1
3dbd5bb33498a4f23e2294ff0aa77d1ce4ee7ac3
-
SHA256
b1e8a916dad57f42fc95874248de402ac9e37023a7b97da448fd354d475ceb50
-
SHA512
6c3271ba107f66377aef5522521275d9c88defa9ed5aa1e74b289ef7b95809a4d232ffad51792e504b8a29b200333bd6062d660b0629e5fa1903bad148add330
-
SSDEEP
24576:asYZVUnBz6NKPkOUqMhHiln753L+/T4rTN9qtFUP5MMws:2ZuJ6bwYilnF3L+/T4rTqFUhMMh
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b1e8a916dad57f42fc95874248de402ac9e37023a7b97da448fd354d475ceb50.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 600KB - Virtual size: 600KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 524KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE