Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20220812-en
General
-
Target
tmp
-
Size
95KB
-
MD5
5d887ee95916860b88353d76f19181fc
-
SHA1
55788310874552593ce6042816a0b9be8a8d2253
-
SHA256
a40cfcf63ca76bd3f1e9b1a8bd4f7e9680c9cab8679b4e976fd522a8650a8560
-
SHA512
f59b8c64ab77e2d39b6da35f2c13a554f06c18f277d61873e7f3c9bca5c2ecd72fd057f68f9d38c658c36320beecb0d0c84050040b4a31e7527bbe6cbb855d42
-
SSDEEP
1536:N7Lvelyqi5dyj00sy77PgPHxnGUa2VGDdEI5nKzPaOFCvcgVP1arqIkGCq2iW7z:N7resqRj6xGUaSGDdEI5nJPgrOGCH
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
tmp.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 336KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xA��u5 Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE