Behavioral task
behavioral1
Sample
ba70660063f79f5e0a10f49dd2ff3f5d25a8c3546318789b8f565023675abe65.exe
Resource
win7-20220901-en
General
-
Target
ba70660063f79f5e0a10f49dd2ff3f5d25a8c3546318789b8f565023675abe65
-
Size
120KB
-
MD5
ff71e8ea2fcfe67af6fca742a5793475
-
SHA1
d6a5d23a7b38a1a9bb4ba7eec1a7241720ece385
-
SHA256
ba70660063f79f5e0a10f49dd2ff3f5d25a8c3546318789b8f565023675abe65
-
SHA512
fa3f3ad985ea42816b4f137ec01e91558abc60370c6a85c7943b75f89cb2b76c90b17d3c298191ad3993f57d1e6a735ba0204f54120d7a5595dc9099ccf6c351
-
SSDEEP
3072:Ig+3fh/PHrgNUqOBx4J2vNbGfvGnd3gW5ZM4/uBnb:h+3fRb9NdndPZMTF
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ba70660063f79f5e0a10f49dd2ff3f5d25a8c3546318789b8f565023675abe65.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE