Behavioral task
behavioral1
Sample
3e91f168a247dea3ed257408d5c583756ad84d6e7efb14517671703f8218b7cf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3e91f168a247dea3ed257408d5c583756ad84d6e7efb14517671703f8218b7cf.exe
Resource
win10v2004-20220812-en
General
-
Target
3e91f168a247dea3ed257408d5c583756ad84d6e7efb14517671703f8218b7cf
-
Size
94KB
-
MD5
ecfb671cf8da51f47b7cddec68caf34a
-
SHA1
0678f3557be54f7d9217e9bb279492313cac323a
-
SHA256
3e91f168a247dea3ed257408d5c583756ad84d6e7efb14517671703f8218b7cf
-
SHA512
4b998a07f271ae5fd63825002964c65098068e08f78c1dc3d0ef77bfad873043b9e470948dd182e32762ba1c1ac3e78bcb22a55c8b9f9ce33f612fc61adddf24
-
SSDEEP
1536:db1KokAj62qwc3Kf26r0k24Ok8LFgbAzM7FpCtGbsNIkavzD08kydyfCU+TA+b5l:dbsV/wNf26rJ2W85Azp8em5avnJkpgf7
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
3e91f168a247dea3ed257408d5c583756ad84d6e7efb14517671703f8218b7cf.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.25pyg0 Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ