Behavioral task
behavioral1
Sample
1291da935ca8d14a13cb5a16b9671e7ecd15a610bd0f087c9f490c17e5d3273f.exe
Resource
win7-20220901-en
General
-
Target
1291da935ca8d14a13cb5a16b9671e7ecd15a610bd0f087c9f490c17e5d3273f
-
Size
98KB
-
MD5
842772c8bf432403d3c1b997abb6a670
-
SHA1
3915993f8b0defae3510b66b19086036ffd30d05
-
SHA256
1291da935ca8d14a13cb5a16b9671e7ecd15a610bd0f087c9f490c17e5d3273f
-
SHA512
380c858159a50f5efabe0a48d5a93e8a865e516ffa1ded7aebbc11167f7e768cf77bf8c62792484619f6faf931dc28b139c19daa770382e0e37d15f71f2a8d9f
-
SSDEEP
3072:ywt7Q89KZdEGC9ZqUsiBIjV2AMpcjDx/Ik/:dt7vedpCLQS/pcjDx/t
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
1291da935ca8d14a13cb5a16b9671e7ecd15a610bd0f087c9f490c17e5d3273f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ