7whudv
Behavioral task
behavioral1
Sample
a343691e1ecd178093e82dc4ad13494edaf2cfd1d11a99e53ffe93bfe2b8c6fd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a343691e1ecd178093e82dc4ad13494edaf2cfd1d11a99e53ffe93bfe2b8c6fd.exe
Resource
win10v2004-20220901-en
General
-
Target
a343691e1ecd178093e82dc4ad13494edaf2cfd1d11a99e53ffe93bfe2b8c6fd
-
Size
146KB
-
MD5
a24b9799dfc883e4c4494d72be805d87
-
SHA1
8f366784d6fc67075445ccbc27322abbe9c754d2
-
SHA256
a343691e1ecd178093e82dc4ad13494edaf2cfd1d11a99e53ffe93bfe2b8c6fd
-
SHA512
9f10e7a86d6d5550d436b63808acb3b80fab413895a33ce6ad93cce08594dc660323f820e54f919dc1c981c26b8e49bca0c2248aecc650db6fb5835356b502b2
-
SSDEEP
3072:+2dha8svfr99TC7IdEg9KgVXq68fsXIRIWihfif:+2C9j99ezg8gVXqPfIfWihf
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
a343691e1ecd178093e82dc4ad13494edaf2cfd1d11a99e53ffe93bfe2b8c6fd.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 197KB - Virtual size: 197KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 289B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 574B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 66B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 300B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ