Behavioral task
behavioral1
Sample
6ce2b40eaeca84f7dd35d7edc7f492949c17489ee430bb3d8befa98fcdeec9e8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6ce2b40eaeca84f7dd35d7edc7f492949c17489ee430bb3d8befa98fcdeec9e8.exe
Resource
win10v2004-20220901-en
General
-
Target
6ce2b40eaeca84f7dd35d7edc7f492949c17489ee430bb3d8befa98fcdeec9e8
-
Size
17KB
-
MD5
a09d820e7cf300e27f3245801a26fa02
-
SHA1
6a4e67baf03c2936ab54427c6fe3473da78d7d7e
-
SHA256
6ce2b40eaeca84f7dd35d7edc7f492949c17489ee430bb3d8befa98fcdeec9e8
-
SHA512
db3a1fce81a86836ecf2aa0bcba73df4ae957dba5af1cdf59bbaf749c6f11504be9af54a030c0075f03dcd6a47dbdfbe30d60e1c8701e41a57799cbbbf3f5bfa
-
SSDEEP
384:sdnTnA0BNndvVuAbXNR9UNe+WbVCb4NkfQ2GLeyLi1KGf:sWEJIALNx9k0Nk4Zd2F
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
6ce2b40eaeca84f7dd35d7edc7f492949c17489ee430bb3d8befa98fcdeec9e8.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ