Behavioral task
behavioral1
Sample
2b9386c03afa01c924f5c9acb95cf917f30f66922ab7a671ef39b109ee38c883.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2b9386c03afa01c924f5c9acb95cf917f30f66922ab7a671ef39b109ee38c883.exe
Resource
win10v2004-20220812-en
General
-
Target
2b9386c03afa01c924f5c9acb95cf917f30f66922ab7a671ef39b109ee38c883
-
Size
208KB
-
MD5
5b04447c8359e8cf30272496b9781508
-
SHA1
a8af9d443eef93a9fe5d9a9f2f43e01417c7f17f
-
SHA256
2b9386c03afa01c924f5c9acb95cf917f30f66922ab7a671ef39b109ee38c883
-
SHA512
f5c1de423a7a9f9ad718327982304c31c7dfa601f3d84b4080558320594d81a837e58554788285fc79bf4abb1608b52250d2766943d27d70460b9effe54ded06
-
SSDEEP
3072:5x8nwBV5UM/Ao/ohToDO6FBiqa27fPS91mkgyNMcri/9oAXF6LKqu83mAd1gd:5xmMLAGoeDO66qfq9jbryd1srWK
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
2b9386c03afa01c924f5c9acb95cf917f30f66922ab7a671ef39b109ee38c883.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 236KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 183KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 345KB - Virtual size: 345KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 9B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ