Behavioral task
behavioral1
Sample
fe21a98fab09cda96f353309e495f94a2ebad0c79f74ed1ab3b70199d06f31c2.exe
Resource
win7-20220812-en
General
-
Target
fe21a98fab09cda96f353309e495f94a2ebad0c79f74ed1ab3b70199d06f31c2
-
Size
82KB
-
MD5
827dbcca30006b2c59bd4c81b700e2d0
-
SHA1
8dbdde5d777129e828aaa1b828fabaf2b7a427de
-
SHA256
fe21a98fab09cda96f353309e495f94a2ebad0c79f74ed1ab3b70199d06f31c2
-
SHA512
70d639d89bff0e3cbaea2af66fbfae5740b58e96be74ecce8c9ed30711d6a1db49f3938145dd4342d3adea7ab1720491231d167d09b3e9fc03700071d2ea2270
-
SSDEEP
1536:NigKoTC5ew/ESFAyiZBg5Dw/4Pz6MvRP0GsG7xhk98NZFjNx9:8gKWCr/dKy+g5E/hgP027dNj9
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
fe21a98fab09cda96f353309e495f94a2ebad0c79f74ed1ab3b70199d06f31c2.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 332B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ