Behavioral task
behavioral1
Sample
aeae8382d77741238b4c5fba6e423c3a2827683313a3b394eb9d3b03725d7ed3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aeae8382d77741238b4c5fba6e423c3a2827683313a3b394eb9d3b03725d7ed3.exe
Resource
win10v2004-20220812-en
General
-
Target
aeae8382d77741238b4c5fba6e423c3a2827683313a3b394eb9d3b03725d7ed3
-
Size
225KB
-
MD5
66d0c93b10c5e700e2b02af0a17cdb94
-
SHA1
d9e2b80dbce3aadaa5aa9157cc0e2db72f97f414
-
SHA256
aeae8382d77741238b4c5fba6e423c3a2827683313a3b394eb9d3b03725d7ed3
-
SHA512
8ad5f4cc12cbac3daec02c7fba61267346a8c4073cbe6dd0865280e3d6a5338cf55b82a0f61f576e8aaa915012c0b92da00a5489690b8cd403c747231e1723e3
-
SSDEEP
3072:FdL1S558mrfkEx1V4GGPnHfFZKUboa0DmqQBBJ2T0VbhRP8pmUZd31I1L0Ss:FB1S55TrkExYGGnvbonvQBxRPEtd3w
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
aeae8382d77741238b4c5fba6e423c3a2827683313a3b394eb9d3b03725d7ed3.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 171KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 326KB - Virtual size: 325KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 9B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 336B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ