Behavioral task
behavioral1
Sample
dcf92d638a4d3594d862df78f1c775032338c566fe6c56499935cd0655f01afb.exe
Resource
win7-20220812-en
General
-
Target
dcf92d638a4d3594d862df78f1c775032338c566fe6c56499935cd0655f01afb
-
Size
122KB
-
MD5
9031f8c0891179b90d8285656f584dda
-
SHA1
bedbc7f7364e89887e08e0e7d65a450cbe62ef5f
-
SHA256
dcf92d638a4d3594d862df78f1c775032338c566fe6c56499935cd0655f01afb
-
SHA512
0901008dc16909bcdcb66917d81eb0077a9e5e82d82caa8ee6fa7185c411fdb4fdf548d7697c01ed4a4f7b918805c5565a84049c4453bc80d0419921a8000355
-
SSDEEP
1536:I2pjPrZ79qXZ2wrwma7fjs5DqhKtl0lfq+KlLSSmRdbcdo:I2RtsXfwjfjOjElXKISMQ
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
dcf92d638a4d3594d862df78f1c775032338c566fe6c56499935cd0655f01afb.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 184KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.rdata Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ