Behavioral task
behavioral1
Sample
f3778533231267ea3c0b68627fe214d2842cd2cdc0e85922d95ade257fa66d21.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f3778533231267ea3c0b68627fe214d2842cd2cdc0e85922d95ade257fa66d21.exe
Resource
win10v2004-20220812-en
General
-
Target
f3778533231267ea3c0b68627fe214d2842cd2cdc0e85922d95ade257fa66d21
-
Size
14KB
-
MD5
4c72239da58936600c66e5ce6f4bdc00
-
SHA1
ab4dc8cd1cd87fa792fd8991cf2e1a8a406048db
-
SHA256
f3778533231267ea3c0b68627fe214d2842cd2cdc0e85922d95ade257fa66d21
-
SHA512
f664fc31087ca1e719dc39e0f645d460a7e5ccd437332eff8c17d07c646774d4dce4fcd2673b7ca2255c2b5658b6c65a537b979cca5f2cd80e1f2385ebe8c8e2
-
SSDEEP
192:2JHvJy5s3dpCSxfnaPais9dfZIZx89gB7AIIs4Wb3Mi57Ur6fT2f:MHv9+Sxfms9dr47Bb3FXM
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f3778533231267ea3c0b68627fe214d2842cd2cdc0e85922d95ade257fa66d21.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 332B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ