Behavioral task
behavioral1
Sample
22f67fb2a795b7199f3a47546679d40000706680de825354bfe88411b33a11fc.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
22f67fb2a795b7199f3a47546679d40000706680de825354bfe88411b33a11fc.exe
Resource
win10v2004-20221111-en
General
-
Target
22f67fb2a795b7199f3a47546679d40000706680de825354bfe88411b33a11fc
-
Size
252KB
-
MD5
198f3ce376661393baece0f351d18db0
-
SHA1
09ed61b47822867797881ed0abdf0ed5e62e7027
-
SHA256
22f67fb2a795b7199f3a47546679d40000706680de825354bfe88411b33a11fc
-
SHA512
c8c4730d951c41ea40eb24320071dc3cf37a8146102f8e472201e5764d16fbd17b3b33b2adfd74cee350b30ee12c40b05aa45623e4cf7d631b97e5a37040fe60
-
SSDEEP
6144:DSltkxm4W+KzIW6B8qv4+Ornc0KulVrTy/d/uLNmpIcwb:DSzIVW+KzqBmzbTVfgd/QNm6Pb
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
22f67fb2a795b7199f3a47546679d40000706680de825354bfe88411b33a11fc.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 424KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 250KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 99KB - Virtual size: 210KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 148KB - Virtual size: 259KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kdata Size: 41KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ