Behavioral task
behavioral1
Sample
1751018eb6302fc202f4e17c81b685b00083afaaacb644583fc95c36d5c37162.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1751018eb6302fc202f4e17c81b685b00083afaaacb644583fc95c36d5c37162.exe
Resource
win10v2004-20220812-en
General
-
Target
1751018eb6302fc202f4e17c81b685b00083afaaacb644583fc95c36d5c37162
-
Size
637KB
-
MD5
309fcc1e01726842e40d9dc6f646cc27
-
SHA1
a9ccb0540bdbfb2deac484ae2266bba95f3bab50
-
SHA256
1751018eb6302fc202f4e17c81b685b00083afaaacb644583fc95c36d5c37162
-
SHA512
d0c14621699a23ef258d70019595091d646b05417c055f1097d55f217adbbdb9ea18e5913c9ba36933eb0d5d5878c01a94066b40aa67c7e77d33157d35bfacf7
-
SSDEEP
12288:Ex8GUr+anW0hnh/qk/kXqk5TwLl6WBTzXyz3IiD4Od/:Ex6KMngk/kXPEljXyz3Ii
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
1751018eb6302fc202f4e17c81b685b00083afaaacb644583fc95c36d5c37162.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 648KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 450KB - Virtual size: 452KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 185KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 11KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ