Behavioral task
behavioral1
Sample
336e2b33e66462c30e09262b8db264b9e2431a1df7bb47e8d17b1a746565d6de.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
336e2b33e66462c30e09262b8db264b9e2431a1df7bb47e8d17b1a746565d6de.exe
Resource
win10v2004-20220812-en
General
-
Target
336e2b33e66462c30e09262b8db264b9e2431a1df7bb47e8d17b1a746565d6de
-
Size
449KB
-
MD5
ef3495254a56005eda29037fab91db90
-
SHA1
ab9bc633cdb279c1b2164cc7b043c5cdf6b9b347
-
SHA256
336e2b33e66462c30e09262b8db264b9e2431a1df7bb47e8d17b1a746565d6de
-
SHA512
5212225649d867e38615264d3fe88614be8d321121b3c8186bea8f319d5bc96ae947ea213448c9032c4cf0a4c911cb0c99950771fdd9ef27dbbeff11014b8865
-
SSDEEP
6144:5uHOyrG1VVE+IRuHOGrG1VVE+I1/UOPSe570Szp3OYcc3rnRaRu8Lg4n:gOWu9O6uxOB0EccrYD
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
336e2b33e66462c30e09262b8db264b9e2431a1df7bb47e8d17b1a746565d6de.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ