Behavioral task
behavioral1
Sample
c18b4135de8e053069f225c7415f67a08196ebd0d06a741824b096f1032e831b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c18b4135de8e053069f225c7415f67a08196ebd0d06a741824b096f1032e831b.exe
Resource
win10v2004-20220901-en
General
-
Target
c18b4135de8e053069f225c7415f67a08196ebd0d06a741824b096f1032e831b
-
Size
56KB
-
MD5
9105ab7052e98468c4c3e59ac2f663ce
-
SHA1
a0e292477c9f9f6875bfb37ee147bf39eaf44f71
-
SHA256
c18b4135de8e053069f225c7415f67a08196ebd0d06a741824b096f1032e831b
-
SHA512
06260b156237e8156d536ea5bf9bdbeec1073758f71b0ac63b189841b84452aa32ebcfe47969babd9fb49f24cc471da4d85dde3370d8c9447e17b213dc7d455c
-
SSDEEP
1536:oSmovabAYc0KTCi0RRu8qcPiENvgn/X/H5DKtIn34:jxiMYcvSRRu8viENvuHZDLI
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
c18b4135de8e053069f225c7415f67a08196ebd0d06a741824b096f1032e831b.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 86KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 97B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE