Behavioral task
behavioral1
Sample
70409cf81147f3b9690854ff75962cdb896c8567b01f97597e862cf109e70a19.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
70409cf81147f3b9690854ff75962cdb896c8567b01f97597e862cf109e70a19.exe
Resource
win10v2004-20220812-en
General
-
Target
70409cf81147f3b9690854ff75962cdb896c8567b01f97597e862cf109e70a19
-
Size
87KB
-
MD5
6f44c02c19ed2687611c039fbca235c0
-
SHA1
6447a2f69ac076c945b5f33355ad39cb32b59911
-
SHA256
70409cf81147f3b9690854ff75962cdb896c8567b01f97597e862cf109e70a19
-
SHA512
4e0b15535cd1f72ea458aca413e36e0a023500ddcb0fd874df7f836b94e13dce8b033d7f92767d93ba7466461bd0c7d8ee5c8908ba907f5a05f0c7c469ccfb53
-
SSDEEP
768:SknvFpEXmdK/9GUq4mE5Z/cMffp+3hdvZZXDuT+pxvPDgAiXKZC2p2ng4nGwcsiS:FAXmd94me/BfMxZXcCvfA2p2nNWsiS
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
70409cf81147f3b9690854ff75962cdb896c8567b01f97597e862cf109e70a19.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.Text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 336B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 836B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE