Behavioral task
behavioral1
Sample
744b87c3ecb6585f7046e8434cb20b9846483162e24f4d7667af81acc5625435.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
744b87c3ecb6585f7046e8434cb20b9846483162e24f4d7667af81acc5625435.exe
Resource
win10v2004-20220812-en
General
-
Target
744b87c3ecb6585f7046e8434cb20b9846483162e24f4d7667af81acc5625435
-
Size
368KB
-
MD5
5083ac71b5fdea9c70f0c492b836ba38
-
SHA1
948a1479264aab2dbb250017b0808a2f7510ff1d
-
SHA256
744b87c3ecb6585f7046e8434cb20b9846483162e24f4d7667af81acc5625435
-
SHA512
7e3185ed1ec599ba2d2b4b0d383c42f6ca01f899c927f5b04f69319a523806a1d58b777d500ea47fdd1745c47dba407ef391f260598934a975b4e141305bbdce
-
SSDEEP
6144:HqnrHDcR2Cwe4BESuqZgueLdCrqu+9J8adjVfO/T2lEvQqdsBFz+uib:0rjcke9SuqPgC1fGjgT2lEvIL
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
744b87c3ecb6585f7046e8434cb20b9846483162e24f4d7667af81acc5625435.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 428KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 360KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 644KB - Virtual size: 644KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 7KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 20B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 35B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ