Behavioral task
behavioral1
Sample
387AF3A4BCA605B138121818660AD64B86F4D884BD8B2AC744CDB144FA38A8BB.exe
Resource
win7-20220812-en
General
-
Target
387AF3A4BCA605B138121818660AD64B86F4D884BD8B2AC744CDB144FA38A8BB.zip
-
Size
557KB
-
MD5
a048f7f15c05f82ea8b418b62e518e3f
-
SHA1
0ad0e34335053b093394bcc80af1415f602242d5
-
SHA256
4d2dc82b322a4232dcfc13af074458c13991794ab4bb91ddb01b66a90ad5d004
-
SHA512
f094b050b02b45ba79a389a23e13b4a1a494452e52590a648cccfaccc39ceeeb6e68331fbadb338fd6ff511a43233038075296e7658308617240bb8f7a241b9d
-
SSDEEP
12288:35kC0lBuyVPMOWOj03+C91iXMe1dgCC/tNm7Qiv:3tGbWOw+MOMev0mhv
Malware Config
Signatures
-
resource yara_rule static1/unpack001/387AF3A4BCA605B138121818660AD64B86F4D884BD8B2AC744CDB144FA38A8BB upx
Files
-
387AF3A4BCA605B138121818660AD64B86F4D884BD8B2AC744CDB144FA38A8BB.zip.zip
Password: infected
-
387AF3A4BCA605B138121818660AD64B86F4D884BD8B2AC744CDB144FA38A8BB.exe windows x86
Password: infected.
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 568KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 564KB - Virtual size: 568KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 735KB - Virtual size: 734KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 288KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ