Behavioral task
behavioral1
Sample
9742de09f89a40bfc29dac5e8616dbc39928e0fd70717c8a2ae809fed48f20e7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9742de09f89a40bfc29dac5e8616dbc39928e0fd70717c8a2ae809fed48f20e7.exe
Resource
win10v2004-20220812-en
General
-
Target
9742de09f89a40bfc29dac5e8616dbc39928e0fd70717c8a2ae809fed48f20e7
-
Size
174KB
-
MD5
05f7a985eb9de0ef1d1e2af5594d6e7e
-
SHA1
12a8f0cb9d90c23460f5454ae1d3b895cccac513
-
SHA256
9742de09f89a40bfc29dac5e8616dbc39928e0fd70717c8a2ae809fed48f20e7
-
SHA512
cc7eb844ad98f1e2c92bc569c935794a7d3155c2419625f3b92355cae6fd08079b21cb83cc4d6953cf234d7b6e49f0bca86bf6a2ac50abc31f8c3f7a4bd0204b
-
SSDEEP
3072:jJagdyRbTsrfl7u+F1RsKbg12UCDoDO70Sa+OW23c2q2+y0lzpr8888888888880:jPYRbIB7uKfdbFUaGc0ScC2pklzF888t
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
9742de09f89a40bfc29dac5e8616dbc39928e0fd70717c8a2ae809fed48f20e7.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 128KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 141KB - Virtual size: 141KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
adfg Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ