Behavioral task
behavioral1
Sample
35a5efd97b0d44bef53bee42f72a2d67a7d1a002626b9273b5b8c50a266f7490.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
35a5efd97b0d44bef53bee42f72a2d67a7d1a002626b9273b5b8c50a266f7490.exe
Resource
win10v2004-20220901-en
General
-
Target
35a5efd97b0d44bef53bee42f72a2d67a7d1a002626b9273b5b8c50a266f7490
-
Size
85KB
-
MD5
e6973fd44dd08f00998c0592db2dc231
-
SHA1
9e2d71839a461f8efcb45d2e7bfeb2fbaacc71fe
-
SHA256
35a5efd97b0d44bef53bee42f72a2d67a7d1a002626b9273b5b8c50a266f7490
-
SHA512
606a048857e322520b44d7f4a15069cf39558a3fa83f5f369be4a7d042be1db312990a5ef7692d3f80b5b5223d81d89653224dc697a14d3f72926860722b7204
-
SSDEEP
1536:++WPxY+U5JT99GP+mH5fNtZtKfpOKC3MwvCzbpgvyO2yMsFg1gzzx0lgrAhw:DWp8Tv0JNZpNC/pAD2yMEg1gO+rA6
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
35a5efd97b0d44bef53bee42f72a2d67a7d1a002626b9273b5b8c50a266f7490.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.code Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ