Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20220812-en
General
-
Target
tmp
-
Size
234KB
-
MD5
2b6ee55145c926155d4e324ff5fe4011
-
SHA1
9c70ec29af30c97181e98aa593b1333df3dc7483
-
SHA256
275d0fa11ae14421eaecd994770cca0f181ea8a9432b7f5c05534efbafb54a63
-
SHA512
9dfd5256bb861df456eedcfa47f8e5376a66625106fdb754eec34023b51b9afdc383b08e996e77434b73c56e495812d3e0da2d26edff8f83006cb703eb916357
-
SSDEEP
3072:FKs3DEj+4B+G/y3a0bGMuTguLRoQf4cqs9TdTzZuwIbJQERRLz65vMf7CDIzm8b3:Fr3oqckUtoGTdTlcXLzzCDIznlgh
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
tmp.exe windows x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 178KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE