Behavioral task
behavioral1
Sample
81e9531d4259a04fe269135e82f8057d0dd089f1f1fda55d90661cca2ccbc64f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
81e9531d4259a04fe269135e82f8057d0dd089f1f1fda55d90661cca2ccbc64f.exe
Resource
win10v2004-20220901-en
General
-
Target
81e9531d4259a04fe269135e82f8057d0dd089f1f1fda55d90661cca2ccbc64f
-
Size
67KB
-
MD5
fa0c05213b4ea10191cba24bd5c00027
-
SHA1
7190165e20596bcc039e7765f22bd5ce1b6a474a
-
SHA256
81e9531d4259a04fe269135e82f8057d0dd089f1f1fda55d90661cca2ccbc64f
-
SHA512
63194d8f6c3c0a90cae0e864e45b68a58af67a8c6ea18998c3591c9f7ddee7ba667c3eba0be0bd0996918576494ee29959c194e20eb214c2c4e7b6c350bd8936
-
SSDEEP
1536:6/D46VGj+nVNt4T2HOgYW3JD3To2L4/lph8wECKFH1IbSpgm:D24T2HLc/lpqxl1Km
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
81e9531d4259a04fe269135e82f8057d0dd089f1f1fda55d90661cca2ccbc64f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1024B - Virtual size: 2KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 995B
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 808B
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 106KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ