Behavioral task
behavioral1
Sample
272814c560ea55ac1342374ce63994dbfbd260435446a32ef29af9150c4dfcf5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
272814c560ea55ac1342374ce63994dbfbd260435446a32ef29af9150c4dfcf5.exe
Resource
win10v2004-20220812-en
General
-
Target
272814c560ea55ac1342374ce63994dbfbd260435446a32ef29af9150c4dfcf5
-
Size
148KB
-
MD5
bbf21d1be1cd5afee3f1ac3e54920413
-
SHA1
508e9fe4250ca784b135a9dddc71295b8ba14c1e
-
SHA256
272814c560ea55ac1342374ce63994dbfbd260435446a32ef29af9150c4dfcf5
-
SHA512
1fa6b5d1c0a67099fbc22b35d7451308bd77bd5b273f147b1351a87c84e38a453b61cc9de8848d2b72920702645060f9c6d3ace25abba1c16d5ee4a08bbde2d3
-
SSDEEP
3072:WKjntrgpq7EB8Plv02Ms8Zy4ZSptu8gJq3L1iEfVfl:WKjt1jc2MpR8Kq7YEH
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
272814c560ea55ac1342374ce63994dbfbd260435446a32ef29af9150c4dfcf5.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 324KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 139KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 436KB - Virtual size: 436KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pb Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE