Behavioral task
behavioral1
Sample
cfd08d07f348bb02d90668b750146f8257715dd67840dd0ec7faf69dea873feb.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cfd08d07f348bb02d90668b750146f8257715dd67840dd0ec7faf69dea873feb.exe
Resource
win10v2004-20220901-en
General
-
Target
cfd08d07f348bb02d90668b750146f8257715dd67840dd0ec7faf69dea873feb
-
Size
39KB
-
MD5
601ec7808112307e87476a47b6871138
-
SHA1
d026a6d6e3b507942b4eebfb02a8c3f2938847d7
-
SHA256
cfd08d07f348bb02d90668b750146f8257715dd67840dd0ec7faf69dea873feb
-
SHA512
055b438e9515a4b5d5f5fdfbfceff03892c8fa8b16f25edc011a37f726db6acf865b1f49dc851cca8c03e5640aed3845667979a496a048eee7e1ee8dab818b91
-
SSDEEP
768:k9Bn2RpxSECWHVYgnqk6i4WUGCmaflH6t8VHjVnb/05:kDn23xSvAVznq9i4HGChY0jVnjK
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
cfd08d07f348bb02d90668b750146f8257715dd67840dd0ec7faf69dea873feb.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 248KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 58KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 66KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ