Behavioral task
behavioral1
Sample
3157aae6289c47eb19483e988958ffc0ebab671779b4cc721ba39095c775a861.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3157aae6289c47eb19483e988958ffc0ebab671779b4cc721ba39095c775a861.exe
Resource
win10v2004-20220812-en
General
-
Target
3157aae6289c47eb19483e988958ffc0ebab671779b4cc721ba39095c775a861
-
Size
93KB
-
MD5
161d7794ec49d3f0bba615610c06121e
-
SHA1
4e20338f86325e836ff3a9a6c820fefdc12f3b40
-
SHA256
3157aae6289c47eb19483e988958ffc0ebab671779b4cc721ba39095c775a861
-
SHA512
14df8735b62212cdf5ab3aa83a40cb9cf6a1337b0f1ecc3ec568867e6803b1305dbfe6ea964db103e1cd79fc99639fadcc2039731bad57b5c401c2b587978204
-
SSDEEP
1536:UZXXsmvevAzTec7P7p9X46P/gmlTFyRkSQ2loCyfPUPdfTDKZdya97/UxZIn0a:cHsmGIPzpVbt2rtWhPMhDKZrUxZIT
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
3157aae6289c47eb19483e988958ffc0ebab671779b4cc721ba39095c775a861.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 416KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 72KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Sections
AUTO Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DGROUP Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 263KB - Virtual size: 263KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ