Static task
static1
Behavioral task
behavioral1
Sample
11075c8430801dc5846060de3a24d3da7d640e51105dfcae5e8a12336fe6489c.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
11075c8430801dc5846060de3a24d3da7d640e51105dfcae5e8a12336fe6489c.exe
Resource
win10v2004-20220414-en
General
-
Target
11075c8430801dc5846060de3a24d3da7d640e51105dfcae5e8a12336fe6489c
-
Size
209KB
-
MD5
185680323125f3b4b76f428ffa6606de
-
SHA1
552f8a422858a98a6d982dc8d3afe4cf612a99ad
-
SHA256
11075c8430801dc5846060de3a24d3da7d640e51105dfcae5e8a12336fe6489c
-
SHA512
a0a2afed75a2b2567d3138ef9e6a03f551c1936711c80d6008e41f41fc0447a172e6fe9a029dd992718bb70d68137dbb0dbb428ea5b2364cab01f08f4a0deeff
-
SSDEEP
3072:VPQIS8NDBXQL8o0GPcFbLa/A1aIS5HhQUZXAdgOfTisJV6FRWVbyCrhIn4/Q6:Vs8R+yLOAEISHA9yFQmaI4Y6
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx
Files
-
11075c8430801dc5846060de3a24d3da7d640e51105dfcae5e8a12336fe6489c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 184KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 199KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.arch Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 3KB
IMAGE_SCN_MEM_READ
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 257KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ