Behavioral task
behavioral1
Sample
57c7b8f62896b63e90dc46cdb8aae2c10ae8f3fad8a637184805e0f36e668f39.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
57c7b8f62896b63e90dc46cdb8aae2c10ae8f3fad8a637184805e0f36e668f39.exe
Resource
win10v2004-20220812-en
General
-
Target
57c7b8f62896b63e90dc46cdb8aae2c10ae8f3fad8a637184805e0f36e668f39
-
Size
205KB
-
MD5
7baab3ea37c9ecfdcc11bc8c8977047b
-
SHA1
2db4a3a40b0811f8af8087945ec670ab959725ca
-
SHA256
57c7b8f62896b63e90dc46cdb8aae2c10ae8f3fad8a637184805e0f36e668f39
-
SHA512
6f8304e4ba49f660d112329d5ef37e9cabf5e63f6c23bc7cd810b1c5d1669d96541617e9c58c0d3b9a64e854414c8fe999309993a9a8bf51f6ac3118cde65592
-
SSDEEP
6144:TTmgzw8RTPbC55dXcnuUWzULEQIBS+eZ2G:ug0OPE9/zWtcSlM
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
57c7b8f62896b63e90dc46cdb8aae2c10ae8f3fad8a637184805e0f36e668f39.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 236KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 176KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 338KB - Virtual size: 337KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 9B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 328B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ