Behavioral task
behavioral1
Sample
338877526b2ce0fe322b7ebf2e5b916680043609a7a3494a226b0b0186d9b471.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
338877526b2ce0fe322b7ebf2e5b916680043609a7a3494a226b0b0186d9b471.exe
Resource
win10v2004-20221111-en
General
-
Target
338877526b2ce0fe322b7ebf2e5b916680043609a7a3494a226b0b0186d9b471
-
Size
83KB
-
MD5
3009ae2a3e1fb3f4a77860c642bf8821
-
SHA1
8d97d01b82a4ca290d0ad14920d87436bc9a1bd0
-
SHA256
338877526b2ce0fe322b7ebf2e5b916680043609a7a3494a226b0b0186d9b471
-
SHA512
e503c4130db0ff40ff7c7cd18b463e056d460f4ceb0c0a58ab1c789f090d343dea0a3aa6e4a556c55310e59fb4a50407dc90f6524b42d30b838b3c1f3139c519
-
SSDEEP
1536:EVD68WX5r5y7PJxrEgB1M9bwuENFy7YMKptHs1wApumscuYHtXbMm8:18Wu7PJdEROsUgnwmzuYHtwN
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
338877526b2ce0fe322b7ebf2e5b916680043609a7a3494a226b0b0186d9b471.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 116KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 81KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 9B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 716B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ