Behavioral task
behavioral1
Sample
c2f3e1c7e65a742da8d19c90adb0f6a1ddd2ede08eb5c02f9200a3f36e323391.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c2f3e1c7e65a742da8d19c90adb0f6a1ddd2ede08eb5c02f9200a3f36e323391.exe
Resource
win10v2004-20220901-en
General
-
Target
c2f3e1c7e65a742da8d19c90adb0f6a1ddd2ede08eb5c02f9200a3f36e323391
-
Size
5KB
-
MD5
2292d3b56b8a35ec4d8dc6f209dac190
-
SHA1
3215e093f8923139c133c854c9ff5b87e70ed562
-
SHA256
c2f3e1c7e65a742da8d19c90adb0f6a1ddd2ede08eb5c02f9200a3f36e323391
-
SHA512
002208c393bd5ad0ddd9ba819e5f5c4f548468d77f9cfb13600e77ea9a2c670a656928efd462792deaa457085b668664b958341e98f7f14862e226691921a0a7
-
SSDEEP
96:oGbdaALvSQ0OUQ1WeoimhLv49fIutq63/LeS:o4daDQ0OUQ1WeDmVQfIutq+/yS
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
c2f3e1c7e65a742da8d19c90adb0f6a1ddd2ede08eb5c02f9200a3f36e323391.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
RJQw Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RJQw Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
dwSPt Size: 6KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE