Behavioral task
behavioral1
Sample
984182eeb8d45c95c10da6d4074e3373b65aaea22f73f839c0dd2c1d4111d41e.exe
Resource
win7-20220812-en
General
-
Target
984182eeb8d45c95c10da6d4074e3373b65aaea22f73f839c0dd2c1d4111d41e
-
Size
63KB
-
MD5
7ce6c70ca07bc591f12d62fc0413ed96
-
SHA1
7997b415ae065720c3b005966056a17a13f3013d
-
SHA256
984182eeb8d45c95c10da6d4074e3373b65aaea22f73f839c0dd2c1d4111d41e
-
SHA512
cfe74874c2515a0151777f8f2f9efe4c4ba9c7e175dfb89fafdc4f78997ffa7ea965e257b1d78ec0d27f308c8e84e8bd4ab2b51ad223d0209d290703f378c37c
-
SSDEEP
768:COCPkgjITOsOuA0hc2Yyu7r/aZgsVGmSCxz8JxtaRJencz75lVizwTf43tHimUu:lCPtLL9eZgsjrF8JxtaRJeY9lyL9imZ
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
984182eeb8d45c95c10da6d4074e3373b65aaea22f73f839c0dd2c1d4111d41e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xyyyqby Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ