Behavioral task
behavioral1
Sample
a6ff606262195d87f81152c1d5152a8dd019b6baef7f1d83cf14abb12290b695.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a6ff606262195d87f81152c1d5152a8dd019b6baef7f1d83cf14abb12290b695.exe
Resource
win10v2004-20220812-en
General
-
Target
a6ff606262195d87f81152c1d5152a8dd019b6baef7f1d83cf14abb12290b695
-
Size
40KB
-
MD5
091955a4e1456f052ff31fdd054a71b7
-
SHA1
685522133fc24fb7a75b56c56dd4a63a901021de
-
SHA256
a6ff606262195d87f81152c1d5152a8dd019b6baef7f1d83cf14abb12290b695
-
SHA512
3b2673263421a7c770a5e9135f6105abfcd2891293bd9e1ff0d82a5bb2b6ef2dbb0d865605f92df102c328e36535a11dedf1142cedd9dc90cd7bfd681bd7d3e0
-
SSDEEP
768:ORPCxE3aJtQ5GfiBHtovTChijKFDy6ADm5v5lFziqd7H9R2n:ORC3JtQ5HBHtE2hieFDqDm5x+
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
a6ff606262195d87f81152c1d5152a8dd019b6baef7f1d83cf14abb12290b695.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 300KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 266KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE