Behavioral task
behavioral1
Sample
2c5c3da61a2db156b0840e46ad66a56712df09e1aa3e070963c0e9a3ec6469a2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2c5c3da61a2db156b0840e46ad66a56712df09e1aa3e070963c0e9a3ec6469a2.exe
Resource
win10v2004-20220901-en
General
-
Target
2c5c3da61a2db156b0840e46ad66a56712df09e1aa3e070963c0e9a3ec6469a2
-
Size
232KB
-
MD5
6aa905269d353c12f808a128ca296fbc
-
SHA1
c084d16433f5e124e09afdebce1812622733fc0b
-
SHA256
2c5c3da61a2db156b0840e46ad66a56712df09e1aa3e070963c0e9a3ec6469a2
-
SHA512
baf40790171a7033d5714c81884e04458a77f54b3503eefe681d17f4ffb6a3ffebbbe5f2238ad6f8bb323f9d67dd714b26d015b72196c1e882f0fcd9e638d460
-
SSDEEP
6144:Y0ht5AjRdq3ax3qWgD+47CAo7gKyDbY8KphqvS1to4+nru96BG:Y0D5yRdq+47CD7KMRHoxru9/
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
2c5c3da61a2db156b0840e46ad66a56712df09e1aa3e070963c0e9a3ec6469a2.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 220KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 252KB - Virtual size: 251KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ