Behavioral task
behavioral1
Sample
11343a40f5ebb2f78dc9c5193da1d67b3cf8af5a9d27e2522f68c4bf2406c1b9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
11343a40f5ebb2f78dc9c5193da1d67b3cf8af5a9d27e2522f68c4bf2406c1b9.exe
Resource
win10v2004-20221111-en
General
-
Target
11343a40f5ebb2f78dc9c5193da1d67b3cf8af5a9d27e2522f68c4bf2406c1b9
-
Size
3.6MB
-
MD5
24e6e3132c64b1d15260d9d52a4d90a2
-
SHA1
9402d342cc2579c9c1abf76d690b7d5814f72d3e
-
SHA256
11343a40f5ebb2f78dc9c5193da1d67b3cf8af5a9d27e2522f68c4bf2406c1b9
-
SHA512
bf80368da28f53eaf4fb0ec54e9d3b6fae0c5a9135867621f7295fd09d097e114cfbc5f059b50f4f2b08677053a33004edb75bea4063486218edcd796192bdd5
-
SSDEEP
98304:ofkp+KkinmSNSBHxXc2MKWG4o8UoGx78b:eqPNqHBHkGv6GxQ
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
11343a40f5ebb2f78dc9c5193da1d67b3cf8af5a9d27e2522f68c4bf2406c1b9.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.6MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
BSS Size: 1.6MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 2.3MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 580B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 290B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ