Behavioral task
behavioral1
Sample
00c8a73fbead55486119feaece28b3936371b839f0148cf31ca8c3aaef4a1619.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
00c8a73fbead55486119feaece28b3936371b839f0148cf31ca8c3aaef4a1619.exe
Resource
win10v2004-20220812-en
General
-
Target
00c8a73fbead55486119feaece28b3936371b839f0148cf31ca8c3aaef4a1619
-
Size
36KB
-
MD5
5f7cbcbe3e4da9d42653496175668d31
-
SHA1
04b17f734f1bc438d966a1749af72502e2b8ec02
-
SHA256
00c8a73fbead55486119feaece28b3936371b839f0148cf31ca8c3aaef4a1619
-
SHA512
6269bdb5ca97d1912a398136547729e2dae523ef6b433e0d107c37fe3a41bc738ecee600a7e4ca3bea1884d1e345a74ac34c55764c027169c167ac2b30983ec4
-
SSDEEP
768:qp22qWFcy5XQ7lO41uirwA98p3MpkNBxd0cJWV6dy/x9J:qpYoX58z1uirL98xMWnT0OQ9J
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
00c8a73fbead55486119feaece28b3936371b839f0148cf31ca8c3aaef4a1619.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.WavfW Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ