Behavioral task
behavioral1
Sample
abbf506197fd56c5d2798a34b9c332fbbdd8eb71a2228fd39ff99c4184f35633.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
abbf506197fd56c5d2798a34b9c332fbbdd8eb71a2228fd39ff99c4184f35633.exe
Resource
win10v2004-20220812-en
General
-
Target
abbf506197fd56c5d2798a34b9c332fbbdd8eb71a2228fd39ff99c4184f35633
-
Size
406KB
-
MD5
65f20d5d09e4ae88cd6e803d2e6df9ae
-
SHA1
660b246b647ce87a97839fa7d2ae908a1b6d5dd9
-
SHA256
abbf506197fd56c5d2798a34b9c332fbbdd8eb71a2228fd39ff99c4184f35633
-
SHA512
e90a71c040461de393ceab0cbf8698b1570acc526040319e47e43114ccc22417f8009dcdc15f988c46fb9f7b9fe826ef99bf48438fe4d43c40286c6d8057db7a
-
SSDEEP
6144:Wjril07CXmHLk/qpwkG/n/xs8XrLuO39zBEsLoQQQMVJKDzHrChM9j0g:EWa7hL/pwpnzt39zQQMqDzHrsg
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
abbf506197fd56c5d2798a34b9c332fbbdd8eb71a2228fd39ff99c4184f35633.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 476KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 400KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 537KB - Virtual size: 537KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ