Behavioral task
behavioral1
Sample
bbf99bd4e55128f32cd869ff8df06aa7527761d55d3d29e8bd1e9eac3f569fbc.exe
Resource
win7-20220812-en
General
-
Target
bbf99bd4e55128f32cd869ff8df06aa7527761d55d3d29e8bd1e9eac3f569fbc
-
Size
71KB
-
MD5
906c26026574265ed28ea02810c13330
-
SHA1
722973118039a1206da18a27b50790f450da1ace
-
SHA256
bbf99bd4e55128f32cd869ff8df06aa7527761d55d3d29e8bd1e9eac3f569fbc
-
SHA512
6d608fe7a1bb14d2e37b0276fb9c2f53ef053fa5d2b8a1f3c6456208e7d9aa6a4f5b722123ef39adb2cf461bd551832bd5f4984c7c8f36390583f58f9d722460
-
SSDEEP
1536:SezDJf8SC1I96kEDV/Te6RC7gYeXNdmQhSbj+Ifx4pXAUO:lDd8r1I96L7e6RDLmpOIfx41O
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
bbf99bd4e55128f32cd869ff8df06aa7527761d55d3d29e8bd1e9eac3f569fbc.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ