Behavioral task
behavioral1
Sample
7c38eed42ccaf7e2e03b2fc0c4588ba7919003a561be5dea45d17852bdaf07c5.exe
Resource
win7-20220812-en
General
-
Target
7c38eed42ccaf7e2e03b2fc0c4588ba7919003a561be5dea45d17852bdaf07c5
-
Size
372KB
-
MD5
26f8c706ee9e9f8d562d842db6024abe
-
SHA1
4cc78cc94efe1014cd698d2d1863e4ea3f71b653
-
SHA256
7c38eed42ccaf7e2e03b2fc0c4588ba7919003a561be5dea45d17852bdaf07c5
-
SHA512
b079b98fd07193a1d40dc0bbbe351aba2408f00926c283077fdf5ddd97a6f70da8d1d45f638eadfe31782a370f59d507a636fe2e270a5a9d2af27d88bfb8f183
-
SSDEEP
6144:BMzzILGFkzhr0pGj9o3ZHq8B1ytlTiy4E7MJFZq4pKzsyMkFhHi2HG:1coqGj9o3VB1ytBx4iCqMy//G
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
7c38eed42ccaf7e2e03b2fc0c4588ba7919003a561be5dea45d17852bdaf07c5.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 232KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 299KB - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 115KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 343B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ