Behavioral task
behavioral1
Sample
9c0d9c397067289a4870dba2855d94a6fc901d11f9bc30311ec3e9ec51afdd7e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9c0d9c397067289a4870dba2855d94a6fc901d11f9bc30311ec3e9ec51afdd7e.exe
Resource
win10v2004-20220812-en
General
-
Target
9c0d9c397067289a4870dba2855d94a6fc901d11f9bc30311ec3e9ec51afdd7e
-
Size
257KB
-
MD5
030bb2875ae97e073cfdbd69bb4e1bc0
-
SHA1
fb5233fa552d0c8c2b4c00ee09ed2f8ba3a0c43d
-
SHA256
9c0d9c397067289a4870dba2855d94a6fc901d11f9bc30311ec3e9ec51afdd7e
-
SHA512
8cac9cca5d1a7bf75bf9d686106dfea38202c0c770268b39e8a039ab5201752f81ba5f8bed1ef73cafa8f717a18fe1e592f6be4ddaadf7d29180add2a01fb9d2
-
SSDEEP
6144:4v6Xobf6D6eK5jJTKoMGwRWQjFObuQ/UT0ie/kw6D5f6:GbCXK5jJOKwRWaO6QMTaTYi
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
9c0d9c397067289a4870dba2855d94a6fc901d11f9bc30311ec3e9ec51afdd7e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 39.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 253KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 4.0MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
.ndata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 10KB - Virtual size: 35.3MB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 287KB - Virtual size: 287KB
IMAGE_SCN_MEM_READ