Behavioral task
behavioral1
Sample
6d5055ae2bbb323dbf5b57c6a486c00a39cd31232066592d4260159afbabd454.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6d5055ae2bbb323dbf5b57c6a486c00a39cd31232066592d4260159afbabd454.exe
Resource
win10v2004-20221111-en
General
-
Target
6d5055ae2bbb323dbf5b57c6a486c00a39cd31232066592d4260159afbabd454
-
Size
1.1MB
-
MD5
423d3df620222a5739ac9ef5355b2b04
-
SHA1
9b0c1f9e3ef19b0a4ac124ced9361e81857ffc91
-
SHA256
6d5055ae2bbb323dbf5b57c6a486c00a39cd31232066592d4260159afbabd454
-
SHA512
c4915ce15b517325a845df4c1e3db316ae561017f111759023d548edc0f8ef446024c6e7440eebaeeee1319c0a9ed0cb9cd1c2cf444cf031df05398c575bd8f6
-
SSDEEP
12288:gOIBteZJys73dOvXDpNjNe8SGOMeZJys73dOvXDpNjNe8SWOjOB0Ju0+OjOB07y7:SBteZJ8NI8HeZJ8NI8aOsO0yOg
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
6d5055ae2bbb323dbf5b57c6a486c00a39cd31232066592d4260159afbabd454.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ