Behavioral task
behavioral1
Sample
20510ebbbd69e5aaefa3e3609764efe1bddeb6467e3c12d1969671d374bfddde.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
20510ebbbd69e5aaefa3e3609764efe1bddeb6467e3c12d1969671d374bfddde.exe
Resource
win10v2004-20220812-en
General
-
Target
20510ebbbd69e5aaefa3e3609764efe1bddeb6467e3c12d1969671d374bfddde
-
Size
954KB
-
MD5
904297ac713ccd2bec3dddd25e1406bc
-
SHA1
4d0dc98de3eaab130e08b7e45ebc51b6fcf2b987
-
SHA256
20510ebbbd69e5aaefa3e3609764efe1bddeb6467e3c12d1969671d374bfddde
-
SHA512
e5019f368e8acec439aa433b160779514f09f21f9d9728ca16379410f132ce3f2c9d59d86c9a0afbd997be717cc53932dc138dd7a989c4f8ca1f95abd3475c01
-
SSDEEP
12288:hf6zEut4RuAwGgc7fNuIEGpgya+sNzaOvoJpaz/g/J/vVSnn:R6zEuAwj2fNuIy+sNH8az/g/J/N+n
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
20510ebbbd69e5aaefa3e3609764efe1bddeb6467e3c12d1969671d374bfddde.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.data Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ