Behavioral task
behavioral1
Sample
aa0eee59366af4dc940555e700dbff0cc6bae9391b61a05802bcaec301cd3779.exe
Resource
win7-20220901-en
General
-
Target
aa0eee59366af4dc940555e700dbff0cc6bae9391b61a05802bcaec301cd3779
-
Size
1.1MB
-
MD5
7ec81005dcd14d8efdd54cb24ac5954f
-
SHA1
90af5ca5ab2d8cfcff467acbed7c859dbff431f1
-
SHA256
aa0eee59366af4dc940555e700dbff0cc6bae9391b61a05802bcaec301cd3779
-
SHA512
49cea5d54e58ac845ea30596b37f6da05a74114a586a6577e97c686397e320a85961c4fb57d0b0b08c7847aa6a2d2e6dc9d76cb197a04081de6a02698ebe1d60
-
SSDEEP
24576:WsYZVUnBz6NKPkOUqMhHiln753L+/T4rTN9qtFUP5MMws:CZuJ6bwYilnF3L+/T4rTqFUhMMh
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
aa0eee59366af4dc940555e700dbff0cc6bae9391b61a05802bcaec301cd3779.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 600KB - Virtual size: 600KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 524KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE