Behavioral task
behavioral1
Sample
862fe2efe19fb6fcb90f1eb3c01b30cece654acf3adcbbdc711165a08a18cdf6.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
862fe2efe19fb6fcb90f1eb3c01b30cece654acf3adcbbdc711165a08a18cdf6.exe
Resource
win10v2004-20220901-en
General
-
Target
862fe2efe19fb6fcb90f1eb3c01b30cece654acf3adcbbdc711165a08a18cdf6
-
Size
81KB
-
MD5
0ebe7ac38810d5c97d9906ce8932bf2c
-
SHA1
1a82bc74026e8e97103ead39fb4199b981140779
-
SHA256
862fe2efe19fb6fcb90f1eb3c01b30cece654acf3adcbbdc711165a08a18cdf6
-
SHA512
3020310d2ac0275c8f5545b861773948ead039335e4943bc221c462a8111aaa71c0ec468c4a199ed2252313a556e7a585ea173697b21c614d005dcfdd8ae44fd
-
SSDEEP
1536:q1DIsjedzv1GNJf9iYCOMYw1csRTytngW1NCCAN4z+t0CFfLz:q1DI8M4NpyYwmemn2Tp
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
862fe2efe19fb6fcb90f1eb3c01b30cece654acf3adcbbdc711165a08a18cdf6.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 97B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE