Behavioral task
behavioral1
Sample
791f55ef1c4789d1a5521732f90f34d976c20fe1dac71929ad680e6ef8808598.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
791f55ef1c4789d1a5521732f90f34d976c20fe1dac71929ad680e6ef8808598.exe
Resource
win10v2004-20220901-en
General
-
Target
791f55ef1c4789d1a5521732f90f34d976c20fe1dac71929ad680e6ef8808598
-
Size
47KB
-
MD5
9ef6ef0ca095b9661b300a17af2f10db
-
SHA1
28759263083775f4e602dc7212f7900276ede564
-
SHA256
791f55ef1c4789d1a5521732f90f34d976c20fe1dac71929ad680e6ef8808598
-
SHA512
ba5dec2dbedafc2a3f897456a1eff8ac9f7e58c9d0d7d01d9614dff52cc619dffe4aab4b6da33fd1ee7b1c4051e07813d1c3d3560f7fb90eb66056c5ea3d4760
-
SSDEEP
768:P8WoAv4CSnVIXiBjYNsnj7v3lvoJqj+sB8qIICONyZXh4kAjItTpqXv:PJLXiBjYGj7vB02B8qfCjEIm
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
791f55ef1c4789d1a5521732f90f34d976c20fe1dac71929ad680e6ef8808598.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 9KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 12B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ