Behavioral task
behavioral1
Sample
cb6ff73d6ec3a8b8e80f1e4dffa923a7fd67ab02467ed7222d8855a0410736a0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cb6ff73d6ec3a8b8e80f1e4dffa923a7fd67ab02467ed7222d8855a0410736a0.exe
Resource
win10v2004-20220812-en
General
-
Target
cb6ff73d6ec3a8b8e80f1e4dffa923a7fd67ab02467ed7222d8855a0410736a0
-
Size
60KB
-
MD5
3e9a177ace4553452bc3692b3ca943ac
-
SHA1
0272f3bb399fec6c323aee75dcca822add6e17f5
-
SHA256
cb6ff73d6ec3a8b8e80f1e4dffa923a7fd67ab02467ed7222d8855a0410736a0
-
SHA512
f00da501f4c2411bb696d5034de8741d6f1539117cb7287f297f39f2003b24b073977ec29b330c5683854f5fdc1249847fb16271cfe84366e318363c7f820515
-
SSDEEP
768:blQQagfMbQqBinYqQw+TjUOad9kLdEItT4hAZQ4onn8NfYK+/2N3Rarn:blQQagfMbQPhjajrU4d//UbgB
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
cb6ff73d6ec3a8b8e80f1e4dffa923a7fd67ab02467ed7222d8855a0410736a0.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 224KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 44KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 248KB - Virtual size: 248KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ