Behavioral task
behavioral1
Sample
52587a9cf6e610347a79a2822cf690b4a107059bc501245a1ecc461a0daf1f17.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
52587a9cf6e610347a79a2822cf690b4a107059bc501245a1ecc461a0daf1f17.exe
Resource
win10v2004-20220901-en
General
-
Target
52587a9cf6e610347a79a2822cf690b4a107059bc501245a1ecc461a0daf1f17
-
Size
423KB
-
MD5
13b41ad1b923cc8d1ae804a4d451668f
-
SHA1
ea5395c5316e5f48a1ac3d64fb79bfa7ae8b6c2f
-
SHA256
52587a9cf6e610347a79a2822cf690b4a107059bc501245a1ecc461a0daf1f17
-
SHA512
3f95295fdd71a2e7e1c05b8fc48d097c9a1a13011d338a01467b5bccab4e1be7d717605212785982fdaab1f5f4a4e80a78e134c3da9dd9b8b8200cc8e01aa0ee
-
SSDEEP
12288:vKCv1uCRJvO5PNOKxNek1Ju7uT7EfDqzp6Cvz:vKkuCrvOPR3ekfu7uTgLqccz
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
52587a9cf6e610347a79a2822cf690b4a107059bc501245a1ecc461a0daf1f17.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 324KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 402KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 332KB - Virtual size: 329KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 100KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rrs0 Size: 224KB - Virtual size: 221KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ