Behavioral task
behavioral1
Sample
865f07a7e8cd57bc7b728fc7427ed5783ef8a59d9d3175232b0aa14b9f06acdb.exe
Resource
win10-20220812-en
General
-
Target
865f07a7e8cd57bc7b728fc7427ed5783ef8a59d9d3175232b0aa14b9f06acdb
-
Size
5.9MB
-
MD5
6979ccda416d161adec1b0ac2e1345d0
-
SHA1
4a83306fec3e1308078752c0c3ec7c255e6b542c
-
SHA256
865f07a7e8cd57bc7b728fc7427ed5783ef8a59d9d3175232b0aa14b9f06acdb
-
SHA512
31b33b1b54308ede61f7a2d466da4bc0082e1d9e0045cc7fae163d0cfb45e945c076afee1ca3e3f87f6563de98a78bec34173a083398ad631880a027c4264c09
-
SSDEEP
98304:asPZh2GPHUNA/cxaV2YWXk6sCzOSvstT0zi/ACdhJrW1MZ8TUHl/HpZPaC5GZ+Kv:auhJUq/cxaV2YWUP53tei/Hq16HlPqCc
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
865f07a7e8cd57bc7b728fc7427ed5783ef8a59d9d3175232b0aa14b9f06acdb.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ