Behavioral task
behavioral1
Sample
ac379f678141348e496f7ca8efd01bda68b03997c5bbf059c16e0366ae439bcc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ac379f678141348e496f7ca8efd01bda68b03997c5bbf059c16e0366ae439bcc.exe
Resource
win10v2004-20220812-en
General
-
Target
ac379f678141348e496f7ca8efd01bda68b03997c5bbf059c16e0366ae439bcc
-
Size
1005KB
-
MD5
a358c602e7cc8b2a4532fc9213734c4c
-
SHA1
5445ac96763821bd25452a7cd394b3e7bac02e09
-
SHA256
ac379f678141348e496f7ca8efd01bda68b03997c5bbf059c16e0366ae439bcc
-
SHA512
68ed93b198cc0e0d1045666c3a55a83793fb7a4c43a9ef289886df447905845a694c9c8fbb61d2e008fad6effcd86561fa809d0d56ca0cfebfe6b998121dce4a
-
SSDEEP
24576:heZJ8NI8NeZJ8NI8TO0eZJ8NI8NeZJ8NI8TOm8:m8a8A8a8n8
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ac379f678141348e496f7ca8efd01bda68b03997c5bbf059c16e0366ae439bcc.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ