Behavioral task
behavioral1
Sample
a846dc88db9c7785c238bcda7de7b9340891ace230d340dd0e625b08c9dd3fe1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a846dc88db9c7785c238bcda7de7b9340891ace230d340dd0e625b08c9dd3fe1.exe
Resource
win10v2004-20220901-en
General
-
Target
a846dc88db9c7785c238bcda7de7b9340891ace230d340dd0e625b08c9dd3fe1
-
Size
2.0MB
-
MD5
eb9e88237fc5062875e55b2131072eb3
-
SHA1
aa02eb610f71cb2f67fb68b221ff46d357ae0be8
-
SHA256
a846dc88db9c7785c238bcda7de7b9340891ace230d340dd0e625b08c9dd3fe1
-
SHA512
9e728501ece38939f0100c72dff6574702a1394b637bc042a4d66f10d9827dda517da6e4563b136e981eb6084aa3faafa07f52ba622503e60dd383ca43ebaed5
-
SSDEEP
49152:qerQZbd2EerQZbd2yXerQZbd2EerQZbd2yf:LrQZ6rQZcrQZ6rQZ1
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
a846dc88db9c7785c238bcda7de7b9340891ace230d340dd0e625b08c9dd3fe1.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ