Behavioral task
behavioral1
Sample
611b52eecfaa1f9c01bd0cca31281d616452796fa450c639b7ce3dd65ca96ba9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
611b52eecfaa1f9c01bd0cca31281d616452796fa450c639b7ce3dd65ca96ba9.exe
Resource
win10v2004-20220812-en
General
-
Target
611b52eecfaa1f9c01bd0cca31281d616452796fa450c639b7ce3dd65ca96ba9
-
Size
14KB
-
MD5
67e3186394a3b8d30b4313d15be69980
-
SHA1
47ca878126f9408990c99466c2017521c9da3314
-
SHA256
611b52eecfaa1f9c01bd0cca31281d616452796fa450c639b7ce3dd65ca96ba9
-
SHA512
e1ebb716fea834480af3dadb059bf3fafce58337f1b5082aae71845b9362d37e9d336b4173f81eb993c7341cf895cae29528f1e17639fbdd1469f7fd75ff0e57
-
SSDEEP
384:58kGBM3PeSF0jOVet35XGP7EGipdN3uLwL:RGBM3Pe5qVC3tGIe
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
611b52eecfaa1f9c01bd0cca31281d616452796fa450c639b7ce3dd65ca96ba9.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE