Behavioral task
behavioral1
Sample
033da5e51721f8d2a9cbd40c2ff93eee932ec0c8a390af0f296f48a68f0fe308.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
033da5e51721f8d2a9cbd40c2ff93eee932ec0c8a390af0f296f48a68f0fe308.exe
Resource
win10v2004-20220901-en
General
-
Target
033da5e51721f8d2a9cbd40c2ff93eee932ec0c8a390af0f296f48a68f0fe308
-
Size
56KB
-
MD5
edb31667027f3fb2f3fb8c300ffa03d7
-
SHA1
747c5cb9b5a2d797b2a7de937b11f545b1628ad2
-
SHA256
033da5e51721f8d2a9cbd40c2ff93eee932ec0c8a390af0f296f48a68f0fe308
-
SHA512
62cfef163beb24a9d8d9aa38b1d24558984c75eb422b908bd282bc95bc3e6f9745d2dbd552dd858ac925e3ee9360d908b6d4741c36d6e581c4a9f7aae8089784
-
SSDEEP
1536:ZST+X1UBc/kaXEfNtVLUI+WNaT5uidskv1Lp2R:ZE+X2BWAdUItw5zp2R
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
033da5e51721f8d2a9cbd40c2ff93eee932ec0c8a390af0f296f48a68f0fe308.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 508KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 121KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eh_fram Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 365KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE