Behavioral task
behavioral1
Sample
af60bffbeb6ea0bda2e965bfacde58b4.exe
Resource
win7-20230220-en
General
-
Target
af60bffbeb6ea0bda2e965bfacde58b4.exe
-
Size
370KB
-
MD5
af60bffbeb6ea0bda2e965bfacde58b4
-
SHA1
4927e54a99625475c2bc15c203b8e7e34c15afb5
-
SHA256
8487ec9e7929cead8c5dcea98ee74b8e1735d53d5ca7993f93b37892fe3c6364
-
SHA512
98279350a800dbb113835c5fdc8a27573080f687c4829ac2ad2ab31f8204cf34e7e5c249b48830292143e271f11e6474f5930416599d53f870f40df2a8b2d269
-
SSDEEP
6144:jTPrps7OG73r52XgTyxza4VoN++ZY3sMl0lDcn4FpidQybCIjp2Fz8cy5J360bcb:vtspzr52bm4VoNsyS4FYgW2J8v5JK8wD
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
af60bffbeb6ea0bda2e965bfacde58b4.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 360KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 365KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.arvg Size: 512B - Virtual size: 4KB