Behavioral task
behavioral1
Sample
30f61f4926ad67bea2a638ff51089ed346e00a1f5de3567acd7baa4071509411.exe
Resource
win7-20220812-en
General
-
Target
30f61f4926ad67bea2a638ff51089ed346e00a1f5de3567acd7baa4071509411
-
Size
488KB
-
MD5
b30f832076db5ca1b840f024c57f0f53
-
SHA1
491e72b415117f5e1962aeec385ce34a622c46e1
-
SHA256
30f61f4926ad67bea2a638ff51089ed346e00a1f5de3567acd7baa4071509411
-
SHA512
e0c6f8e2ffed08444c316ab26c33cccd9fcd8f12057fecfaf0ac41640ac071281fb71c19c09f5b03118097a087eaa52f1034521907743236c1822a9fe6f378d2
-
SSDEEP
12288:Q81xs5wD9xKO0Fz6cWgvIJk1ByBS/dmRsT7uEXevYojoBCzoSH:J1iOW6W19/z+hvYs
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
30f61f4926ad67bea2a638ff51089ed346e00a1f5de3567acd7baa4071509411.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 664KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 455KB - Virtual size: 456KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE