Behavioral task
behavioral1
Sample
7fe01a830efddf1109e76641b3e8b2d27941b21bedb7bde5180771c47bc56518.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7fe01a830efddf1109e76641b3e8b2d27941b21bedb7bde5180771c47bc56518.exe
Resource
win10v2004-20221111-en
General
-
Target
7fe01a830efddf1109e76641b3e8b2d27941b21bedb7bde5180771c47bc56518
-
Size
280KB
-
MD5
b5cbffd2daa2d899b19e7b8bd3e3d0a7
-
SHA1
069c53d1e37d57d66968b7bad6a93cac9e221883
-
SHA256
7fe01a830efddf1109e76641b3e8b2d27941b21bedb7bde5180771c47bc56518
-
SHA512
474d3f465d35f33668ca4b1bb80063bee736eb48c1fa16cbda270d5769721fb53f456637cc0b8307a8cf9d172a2124a5b0238cb4d832157405c1b3ccb6b37c9c
-
SSDEEP
6144:v35RU6AQ5Zc1gyR/udjIiMzuHMd3RwPKD:vA6/cu84I/NvyK
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
7fe01a830efddf1109e76641b3e8b2d27941b21bedb7bde5180771c47bc56518.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 500KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 242KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 436KB - Virtual size: 432KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 187KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ