Behavioral task
behavioral1
Sample
5178f37905025e7b3b3040dd95d2a6e4f0d8473e6ec11611b1884c508e0fae4a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5178f37905025e7b3b3040dd95d2a6e4f0d8473e6ec11611b1884c508e0fae4a.exe
Resource
win10v2004-20221111-en
General
-
Target
5178f37905025e7b3b3040dd95d2a6e4f0d8473e6ec11611b1884c508e0fae4a.exe
-
Size
538KB
-
MD5
058ed1f78d686d3071569dfceee96825
-
SHA1
149167c5fd3a18fcc3dd62308ca108c5e2873edd
-
SHA256
5178f37905025e7b3b3040dd95d2a6e4f0d8473e6ec11611b1884c508e0fae4a
-
SHA512
4f921bc6a8b6c4c293611db65a283e9785a9e9c1d2373fd3ffa96630c481b77374cf583c69e1399549672e43b32c4c09cb6f7acfdd0087f2f15c7b48e2c8ce14
-
SSDEEP
12288:Bd8Zzxg4tTHwVkS0Y1zG/eHJz88MuGlUwKop+fE0wgeXz:B+FxgL6Y1S8uPhF8wgKz
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
5178f37905025e7b3b3040dd95d2a6e4f0d8473e6ec11611b1884c508e0fae4a.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 944KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 438KB - Virtual size: 440KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 66KB - Virtual size: 147KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 948B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.symtab Size: 512B - Virtual size: 4B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE