Behavioral task
behavioral1
Sample
c8ee4749b3241b99cce0ca4df5ef3f76ca667cd6ace3cf7e46a4716dfecc9f07.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c8ee4749b3241b99cce0ca4df5ef3f76ca667cd6ace3cf7e46a4716dfecc9f07.exe
Resource
win10v2004-20220812-en
General
-
Target
c8ee4749b3241b99cce0ca4df5ef3f76ca667cd6ace3cf7e46a4716dfecc9f07
-
Size
63KB
-
MD5
6773c9f9784e8146004837f476b32753
-
SHA1
01ad16f8ef0653acb7d198e8957bcb34a4ce4158
-
SHA256
c8ee4749b3241b99cce0ca4df5ef3f76ca667cd6ace3cf7e46a4716dfecc9f07
-
SHA512
72b6f2e4ef5c0e55f242da62fe36f7ca584b1174e83ec87fbed6144f9d985474b367761e124e3d7986741ff872e30ac33aec07c81c19663876ab3f40bd02235e
-
SSDEEP
1536:V8EPka7+f7u4Q5giHY/6WauOWQASu+U/+ni0JTmv/RxP:VQaKf7R04/6WaupSfU/+jMpV
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
c8ee4749b3241b99cce0ca4df5ef3f76ca667cd6ace3cf7e46a4716dfecc9f07.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 81KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 297B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 366B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ