Behavioral task
behavioral1
Sample
84797a3d9ba96cfdca01e2fe5e22bfa4a4ab6b4ec634a12afb21f2e8b8f40c8a.exe
Resource
win10-20220812-en
General
-
Target
84797a3d9ba96cfdca01e2fe5e22bfa4a4ab6b4ec634a12afb21f2e8b8f40c8a
-
Size
6.0MB
-
MD5
c982c47f56292dbb446977cde8ece6b5
-
SHA1
a4b1817b5e6b2380bfe17ca7a467e28210b363a8
-
SHA256
84797a3d9ba96cfdca01e2fe5e22bfa4a4ab6b4ec634a12afb21f2e8b8f40c8a
-
SHA512
bbfcf9d5dfc876b1703542425ce93a1b5005d61c0aa6922a706bce0114e924c80d97eef85ae2a85bb5fa7d5a94de12a84229d3feb1f2cbef574c14b5346668c2
-
SSDEEP
98304:LNBMFZiq1UK8Evy12ayUSxBm3peoNsHNc4siWu4knSV2oVh/+OqgNPaC5GZ+K/cF:LPosVf1fSxBm3pFiO4siWBknSV2oX/+g
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
84797a3d9ba96cfdca01e2fe5e22bfa4a4ab6b4ec634a12afb21f2e8b8f40c8a.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ