Behavioral task
behavioral1
Sample
f1055a713baebc863c92d5e9b70c83b4043a9c3b5975fd63683421d46988bfcb.exe
Resource
win7-20230220-en
General
-
Target
f1055a713baebc863c92d5e9b70c83b4043a9c3b5975fd63683421d46988bfcb.exe
-
Size
116KB
-
MD5
55e5647a4cf23700abb43e04349af7ff
-
SHA1
4fbf606c1dd07729bdd5974b7660dd66d7ea6dd9
-
SHA256
f1055a713baebc863c92d5e9b70c83b4043a9c3b5975fd63683421d46988bfcb
-
SHA512
086e98b6f4bb96a2f59be2a53c3134424efa56d631938477ba42e6e08f79c2f870a5cbb73be64c00aeea13852d5179600fbbbf055224efbab1ade19a36e5c2b9
-
SSDEEP
1536:V+hzRsibKplyXTq8OGRnsPFG+RODTb7MXL5uXZnzEYNlcVQIFkbq/p23JAMBTqJd:gROzoTq0+RO7IwnYu6VHir3J2qed
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx
Files
-
f1055a713baebc863c92d5e9b70c83b4043a9c3b5975fd63683421d46988bfcb.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 52KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jbgklul Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jhqnikp Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE