Behavioral task
behavioral1
Sample
c6c42496aeab8dbfd0b9b5a22272fca5b16031453597cee98370f2e01a12e761.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c6c42496aeab8dbfd0b9b5a22272fca5b16031453597cee98370f2e01a12e761.exe
Resource
win10v2004-20220812-en
General
-
Target
c6c42496aeab8dbfd0b9b5a22272fca5b16031453597cee98370f2e01a12e761
-
Size
893KB
-
MD5
b1fc6212ed64e88703aa535939ae1e3a
-
SHA1
d074ecaaa1c06baab68554a4aeb510b0d63decf3
-
SHA256
c6c42496aeab8dbfd0b9b5a22272fca5b16031453597cee98370f2e01a12e761
-
SHA512
03a0f510032e3047a54eb832bb1c1e9a92f1e68da69bd85a86dde846f080875e2f9370495463c7dd73eeab4dddad834c0722e4f80360040ed3dcd8c3eda96926
-
SSDEEP
12288:g9MWRUI2uGHIZPJpFY9nOF0hycviHs6CQkBuHsZfYLyB9SqoKumDXh1al+hte5+D:iXf2uDR730hmHnqoKpXLaUygKPwobCB
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
c6c42496aeab8dbfd0b9b5a22272fca5b16031453597cee98370f2e01a12e761.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ