Behavioral task
behavioral1
Sample
4355ff50ad43612f47b6ffe615b0cadf5bab40deaa6f96a1e5aaf7dc30008b5e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4355ff50ad43612f47b6ffe615b0cadf5bab40deaa6f96a1e5aaf7dc30008b5e.exe
Resource
win10v2004-20220901-en
General
-
Target
4355ff50ad43612f47b6ffe615b0cadf5bab40deaa6f96a1e5aaf7dc30008b5e
-
Size
31KB
-
MD5
2616be758882d247c1342fb32bff7f70
-
SHA1
0f4eaed5d6c4842937b101f4e7045d2027195e65
-
SHA256
4355ff50ad43612f47b6ffe615b0cadf5bab40deaa6f96a1e5aaf7dc30008b5e
-
SHA512
64f94e8b027515ca5cfb693a0790d9ff1576b08267ff778ef18296c08c08306a0e89ccc98123d6e6887dc66e24136f7ad9fe27098f974cf0ca6a4c13bf5970c1
-
SSDEEP
768:1rUtDzYdmS6VA/DsEprORSGKGF8psqGUl0Z3:1QIdmELs2ORSGKGFBqn
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
4355ff50ad43612f47b6ffe615b0cadf5bab40deaa6f96a1e5aaf7dc30008b5e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 940B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ