Behavioral task
behavioral1
Sample
9c5876876a7dc1cb41952b45b1da482d3ed3ac0fb40dd9bf63f5a2f9a7a277dd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9c5876876a7dc1cb41952b45b1da482d3ed3ac0fb40dd9bf63f5a2f9a7a277dd.exe
Resource
win10v2004-20220812-en
General
-
Target
9c5876876a7dc1cb41952b45b1da482d3ed3ac0fb40dd9bf63f5a2f9a7a277dd
-
Size
34KB
-
MD5
a2f387f85d666714bc022ab47cc297d0
-
SHA1
b731eafe15e4cd0ce6aa67057621b2290f4851c4
-
SHA256
9c5876876a7dc1cb41952b45b1da482d3ed3ac0fb40dd9bf63f5a2f9a7a277dd
-
SHA512
8094ceb493c3b4d51726a39fdda84d55be149688ef6a913e0c6bad261f42b4012e843d6f09fc1b3b1c722778794c9c4de7d77d6168ae48f4202742d9ffad778a
-
SSDEEP
768:OWMRMO8nnF1Yt/ybUZkFPd8wpS9hucD5+KwqrrwO7:OL8nM5ybQ/4YhT3wqoO7
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
9c5876876a7dc1cb41952b45b1da482d3ed3ac0fb40dd9bf63f5a2f9a7a277dd.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 520B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 514KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 30B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ