Behavioral task
behavioral1
Sample
b7a2c1f1598f6f4519ba1f2f02c3313c4457f78e5dd13b8ce5f0bfed5cef5835.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b7a2c1f1598f6f4519ba1f2f02c3313c4457f78e5dd13b8ce5f0bfed5cef5835.exe
Resource
win10v2004-20221111-en
General
-
Target
b7a2c1f1598f6f4519ba1f2f02c3313c4457f78e5dd13b8ce5f0bfed5cef5835
-
Size
193KB
-
MD5
f698a254049092790beadc9195db293a
-
SHA1
34ed9fa580288ad84aabab0c26e9a47483476458
-
SHA256
b7a2c1f1598f6f4519ba1f2f02c3313c4457f78e5dd13b8ce5f0bfed5cef5835
-
SHA512
98d7dd2659c70ec3b9ecee75c2abf9cad6e222561e76ad06f50f4ba1746a9815762556397e09d6f02c45e334afa0d903aec5c76bf26438ae1061dc981cc7565c
-
SSDEEP
3072:WmpDz4zskGs0muDS66OQBeCEKgFjZ1XCCCnIIynfw5uWMvbNXZOwAzvcYri:jzDZzmuSVOQetlS5ynfYWbNXZOwSEY
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b7a2c1f1598f6f4519ba1f2f02c3313c4457f78e5dd13b8ce5f0bfed5cef5835.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 181KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 135KB - Virtual size: 135KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.arch Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.tls Size: 1024B - Virtual size: 721B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 729B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ