Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20221111-en
General
-
Target
tmp
-
Size
4.7MB
-
MD5
f516597acba8709292709d29fe6ad4b1
-
SHA1
791ddef4086a3c274500f2e48b9f4f0a7f83572f
-
SHA256
39be5aa02d074dcecebe251d3f5a62073620c340901128bb751404b17770d9be
-
SHA512
d4e277c052a655a629fa30c2115cf5f4d308d3181ef71a4dfff6eb87b35183c93dd2663ac1552309bfa28c3425152215f0b6c8e1ac4fb337174f2e25c81adf07
-
SSDEEP
98304:QZc1bvlKU/tvYHpUyYcKKG20qUK6Bv/kfyct07AGZLtjkUgsqqQ/1:OWLlKU/tvYJpYlKBEv/wt0kEL2Ug8QN
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
tmp.exe windows x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 18.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.7MB - Virtual size: 4.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE