Behavioral task
behavioral1
Sample
1d151595b916ae950a9f55524b91969da463c6c54f9f89c59f38ad7234e54ac4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1d151595b916ae950a9f55524b91969da463c6c54f9f89c59f38ad7234e54ac4.exe
Resource
win10v2004-20220812-en
General
-
Target
1d151595b916ae950a9f55524b91969da463c6c54f9f89c59f38ad7234e54ac4
-
Size
78KB
-
MD5
10353ec50097785275491c8c5600ce4b
-
SHA1
d0868b0f15a2ca1d9c64fded32bad66a5827e6e9
-
SHA256
1d151595b916ae950a9f55524b91969da463c6c54f9f89c59f38ad7234e54ac4
-
SHA512
6d854e1aedf5669633598a1a8a6bb6f87a7611ab7d6e5d98badf63315778050d5b9b43a73b56a8c3914b9ce436dd330ccdb9978c4be799f56302b120e6f29f23
-
SSDEEP
1536:Fx4+wagbQJB6vkgsF02DketG+XseGEDwOKfxO0YD/NyOiKOaQD2Eutz5bJ:uaFJB4sF0HetkLqwdsNpTO3DqNbJ
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
1d151595b916ae950a9f55524b91969da463c6c54f9f89c59f38ad7234e54ac4.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 224KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 192KB - Virtual size: 191KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 35KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 12B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ