Behavioral task
behavioral1
Sample
923aa8cd160e5e2df12b33f569b38d992eab60d5eec95048275609e3c4aa1779.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
923aa8cd160e5e2df12b33f569b38d992eab60d5eec95048275609e3c4aa1779.exe
Resource
win10v2004-20220812-en
General
-
Target
923aa8cd160e5e2df12b33f569b38d992eab60d5eec95048275609e3c4aa1779
-
Size
182KB
-
MD5
74e04a59f7fda86004373ec26741b020
-
SHA1
7517273c06883589a84f113ac5449d5b94fc0d01
-
SHA256
923aa8cd160e5e2df12b33f569b38d992eab60d5eec95048275609e3c4aa1779
-
SHA512
aa74d009cdefdf65df0a5b6b443a138588fe1d26baababccae8b3b1678556e5222493fd1115436006861fe0090381922b4cef1db0589bebb768ea2e2b32b506c
-
SSDEEP
3072:WcO302yXTVNWSEoktCCLP1JkcLsYCQiEg265prFunutsQjely/1fkXrdDHXQP:WXk8QCLvLsfQN65p8m/UekRzG
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
923aa8cd160e5e2df12b33f569b38d992eab60d5eec95048275609e3c4aa1779.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 296KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 165KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 92KB - Virtual size: 321KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.adata Size: 68KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE