Behavioral task
behavioral1
Sample
f37c35791536660740f9eb5c77f47d8dcde5aa4c8c6e901372e8f36d2d6d7796.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f37c35791536660740f9eb5c77f47d8dcde5aa4c8c6e901372e8f36d2d6d7796.exe
Resource
win10v2004-20220812-en
General
-
Target
f37c35791536660740f9eb5c77f47d8dcde5aa4c8c6e901372e8f36d2d6d7796
-
Size
674KB
-
MD5
65fa10e8f0ac1566ac7527a89a4f8d50
-
SHA1
f02c28cc183c56cc060ec5aca9d7cc2668cbb06b
-
SHA256
f37c35791536660740f9eb5c77f47d8dcde5aa4c8c6e901372e8f36d2d6d7796
-
SHA512
0fa2cab43405e298f5e349e7da8b35abab4bc9203bf151e90e175b2e434e9d98a2fc4a69cdcccd1b086a96f305884465cd104b3e88aa0a881eb8a893992f4695
-
SSDEEP
12288:uIX/2sAp5fbds+aksR5shzDrkTuHqO6IX/2sAp5fbds+aksR5shzDrkTuHqO:r/YT+5MzMubv/YT+5MzMub
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f37c35791536660740f9eb5c77f47d8dcde5aa4c8c6e901372e8f36d2d6d7796.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 604KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 331KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 783KB - Virtual size: 782KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 7KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ