Behavioral task
behavioral1
Sample
6a09ec75075a0c16c5cd7b6fdd4b3e44623d4cfe66046cc3c13a229766796436.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6a09ec75075a0c16c5cd7b6fdd4b3e44623d4cfe66046cc3c13a229766796436.exe
Resource
win10v2004-20220812-en
General
-
Target
6a09ec75075a0c16c5cd7b6fdd4b3e44623d4cfe66046cc3c13a229766796436
-
Size
187KB
-
MD5
629570fcd68cd3596c8d08625f727c83
-
SHA1
8d0719642a737451e9a81fa28c352d7c801436cf
-
SHA256
6a09ec75075a0c16c5cd7b6fdd4b3e44623d4cfe66046cc3c13a229766796436
-
SHA512
7c524d154ce017375105a6551bab2340f570c16e596be093edfe51327741e8bf0e359e909c4dc0f08ff474ad19d6afbf2609149c66f66c0557f04d845af05f17
-
SSDEEP
3072:p+iQWEyvvm68GL2BaHS7ykvWdQSu0/ksJJSJGfU/Rl1GzCM99l:4Avm+L2Ba5kvWKSujo85GCM99
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
6a09ec75075a0c16c5cd7b6fdd4b3e44623d4cfe66046cc3c13a229766796436.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 161KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 134KB - Virtual size: 134KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ