Behavioral task
behavioral1
Sample
84af07ee61fc2c2d7c6cd1ac8ac866c3d8898549477e4f3be4c310b7869a5db3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
84af07ee61fc2c2d7c6cd1ac8ac866c3d8898549477e4f3be4c310b7869a5db3.exe
Resource
win10v2004-20221111-en
General
-
Target
84af07ee61fc2c2d7c6cd1ac8ac866c3d8898549477e4f3be4c310b7869a5db3
-
Size
442KB
-
MD5
8b5ea2ff4599b63ee3f61f95b9f9d7bd
-
SHA1
7c3fa3d13ba74d798b846142962176b8985fd785
-
SHA256
84af07ee61fc2c2d7c6cd1ac8ac866c3d8898549477e4f3be4c310b7869a5db3
-
SHA512
35b0634c7836c8e3e1c6defc5cb4cf870ee68ce2343858eaebdf9373064b8681e3121005c6ff3a5c96d31fd085180ad15efa00ebf4e91559255b016247c822d3
-
SSDEEP
6144:jgdRf6hmKQeIdX0tX9U2e4Bhh76PzgqglWCKhhuKpVB9ZeTbFX/qw+lnxuGPl:2VEGdXi9UpQUzgXlMPuKbWJvHil
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
84af07ee61fc2c2d7c6cd1ac8ac866c3d8898549477e4f3be4c310b7869a5db3.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 904KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 281KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 159KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe .vbs windows x86