Behavioral task
behavioral1
Sample
73641954f5a132bf10db687bb1fed57aa6a11656949871da08297a7790f3b3e6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
73641954f5a132bf10db687bb1fed57aa6a11656949871da08297a7790f3b3e6.exe
Resource
win10v2004-20220812-en
General
-
Target
73641954f5a132bf10db687bb1fed57aa6a11656949871da08297a7790f3b3e6
-
Size
25KB
-
MD5
de128350145f9f3c44a0c8caff719be7
-
SHA1
15b655215e09dc97e06ad543fdd33ab4299486c5
-
SHA256
73641954f5a132bf10db687bb1fed57aa6a11656949871da08297a7790f3b3e6
-
SHA512
56fdb65a49de0c82f49452ca12b4ce864ac7710b244ff8cfd1a70e0cc501ce1e67b2523a868385c81d6489ba835b9eb1879ff85d18e4461a698761ce6c1c5116
-
SSDEEP
768:4+IRwZfeFVwekMunjz+m0aa9lI4y6nyI5:4+H6Lu3+Z9G4yu
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
73641954f5a132bf10db687bb1fed57aa6a11656949871da08297a7790f3b3e6.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 136KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 124KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ