Behavioral task
behavioral1
Sample
55ba80394a5df9b7c5fc3f8ec4eaec5fba6bd7eca8e1c2130f27f66b593586ca.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
55ba80394a5df9b7c5fc3f8ec4eaec5fba6bd7eca8e1c2130f27f66b593586ca.exe
Resource
win10v2004-20220901-en
General
-
Target
55ba80394a5df9b7c5fc3f8ec4eaec5fba6bd7eca8e1c2130f27f66b593586ca
-
Size
1.7MB
-
MD5
0d788d955930d105f1e77df8989d8af7
-
SHA1
afee38c73daf3d004b0a1e38125bac00233ee938
-
SHA256
55ba80394a5df9b7c5fc3f8ec4eaec5fba6bd7eca8e1c2130f27f66b593586ca
-
SHA512
6991615f7791678ae31bc6c6e6f8d5ab3eac0f6292b1e1b3acbe3b475494d308b9ca23d5152de817d66ef2ace97f122dfbfe2eafe9641992d4ad5af5154a95b0
-
SSDEEP
24576:jM5D18NpEG/gKoFSdE2NNLMO6UCjR3X7TxKaXQeQuMqZ6neSDFxMu2R:jM4zgKoFD2UOKVX7TMaXQeQQO3M
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
55ba80394a5df9b7c5fc3f8ec4eaec5fba6bd7eca8e1c2130f27f66b593586ca.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 424KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 193KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 350KB - Virtual size: 350KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ