Behavioral task
behavioral1
Sample
637ebc0afb4aec6f33625380d0e5326d7fe4546917556b55b9ae8e491d056886.exe
Resource
win7-20220812-en
General
-
Target
637ebc0afb4aec6f33625380d0e5326d7fe4546917556b55b9ae8e491d056886
-
Size
93KB
-
MD5
492f1b3163c3d3aa6498530b711cafa0
-
SHA1
9963b75dc416d03d547dc892d52f1b87a417a923
-
SHA256
637ebc0afb4aec6f33625380d0e5326d7fe4546917556b55b9ae8e491d056886
-
SHA512
f78affcf7559563978358fa6602cd99129ae4a7ec86532659ff2aa85b3668d15639a4073a9b4e25725961a50747a9771d944c23cf38d3dfe85f2af99d7bbede4
-
SSDEEP
1536:375WSQd/5qKXWgpVIwszqbYP30SCk9KUluD7CGxkxFTP4qrPrcq:Fy5qKJpVIVxnfsUTTTAHq
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
637ebc0afb4aec6f33625380d0e5326d7fe4546917556b55b9ae8e491d056886.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 128KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ