Behavioral task
behavioral1
Sample
1a83d41507dffbafc8382d97635e0ce0b7f2e35eff65bcdf1cb4310cb9caa4e9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1a83d41507dffbafc8382d97635e0ce0b7f2e35eff65bcdf1cb4310cb9caa4e9.exe
Resource
win10v2004-20220812-en
General
-
Target
1a83d41507dffbafc8382d97635e0ce0b7f2e35eff65bcdf1cb4310cb9caa4e9
-
Size
200KB
-
MD5
55060c30842a252dba5970c0ab1f5a31
-
SHA1
a222f218d0a48f59235a14c2620099cc03a25b67
-
SHA256
1a83d41507dffbafc8382d97635e0ce0b7f2e35eff65bcdf1cb4310cb9caa4e9
-
SHA512
f0e70078063a4d53a56d29022ec89b9bf6cd03a635764eebbf571a70a545721da2414a4b3514979e61c69bd6fc2f0662ac0457dc1119ee357fca42c12f46c2d7
-
SSDEEP
3072:RdGE038dZ4g9wtWl3DLCXuyd0RorHsoX6k5XCjJ+zhB3aNmui5J3G0Y8Dl8n:nG8Z43to+Xuyyo7dhyJ+f3azuY8DlM
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
1a83d41507dffbafc8382d97635e0ce0b7f2e35eff65bcdf1cb4310cb9caa4e9.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 380KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 192KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 111KB - Virtual size: 396KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 149KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ