Behavioral task
behavioral1
Sample
ca90da8a49156810bcbb46d9584616d8ff19c707c2a485f2f65307662bd7374c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ca90da8a49156810bcbb46d9584616d8ff19c707c2a485f2f65307662bd7374c.exe
Resource
win10v2004-20220812-en
General
-
Target
ca90da8a49156810bcbb46d9584616d8ff19c707c2a485f2f65307662bd7374c
-
Size
13KB
-
MD5
0675e0f1c9177575f08c6af755f2ef7d
-
SHA1
9fab24b809503e56c40070efb05bdd68d77c7406
-
SHA256
ca90da8a49156810bcbb46d9584616d8ff19c707c2a485f2f65307662bd7374c
-
SHA512
81db91374453b4321a007d3d9563b9e7bfcdb364373a6e50469ab87dd76286f5a3519cdbdeca71800a961ce139ebca94f915a906c39ddff74654e3d7656c9947
-
SSDEEP
192:J839uLaYEBKcVjuwx4ZzrmHXe3hDIWghIS2v4F74vJjwPq8UcYXyUPzE0/THoh7/:63SE0ri4Z2HXSUqX/RdPQ4Ms/27
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ca90da8a49156810bcbb46d9584616d8ff19c707c2a485f2f65307662bd7374c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 97B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE