Behavioral task
behavioral1
Sample
80dadeba6f12e37b9a529dc8902065c8d1b0cfaa4745425c9af5bea08fbf4a14.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
80dadeba6f12e37b9a529dc8902065c8d1b0cfaa4745425c9af5bea08fbf4a14.exe
Resource
win10v2004-20220812-en
General
-
Target
80dadeba6f12e37b9a529dc8902065c8d1b0cfaa4745425c9af5bea08fbf4a14
-
Size
67KB
-
MD5
9657f0775f022ee436855077127f967c
-
SHA1
92014d1579ea2f15c91cf9a23ec21692d7843c8a
-
SHA256
80dadeba6f12e37b9a529dc8902065c8d1b0cfaa4745425c9af5bea08fbf4a14
-
SHA512
ef53e651413b0086a26dcf0f25682d8537419e12bb6fa15a4a15ff292debe48a74c5ba2ab82b9ccc486758531394f64324056cb6cf16da74032c208b7aad05dc
-
SSDEEP
1536:fHlIUV/UBTSF7dPnQ5gn3fAfoT8+a3QW5P6cHqE5wvkA7w:fiq/U1IPQa3YfCoQ6P6cKmukA7w
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
80dadeba6f12e37b9a529dc8902065c8d1b0cfaa4745425c9af5bea08fbf4a14.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 444KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 86KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 272B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 362KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE