Behavioral task
behavioral1
Sample
4aa8ca90f243cbc92345eca135f39086752adbe5162b218e0392d83ff4820e87.exe
Resource
win7-20220812-en
General
-
Target
4aa8ca90f243cbc92345eca135f39086752adbe5162b218e0392d83ff4820e87
-
Size
42KB
-
MD5
168ba3c8c5dedc3e07eca4d39ddb0510
-
SHA1
e94c51ed1b47bd19e1cd33be1e677e83da43326f
-
SHA256
4aa8ca90f243cbc92345eca135f39086752adbe5162b218e0392d83ff4820e87
-
SHA512
0fa1db6f2116f2d4b7d6e7bf6dad3b702433d11b4029a5a3162bbc3b19435a21137441557142678b6a7295ff745127722cfa8606fdc4f708983dbf672f7c5d26
-
SSDEEP
768:yEyjL6YrsRVMLBk4l13PGUVcx0chCk1WdxGOZvqslUyyj8B:ML6YrZa4l1VVMXMxG6vqcuI
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
4aa8ca90f243cbc92345eca135f39086752adbe5162b218e0392d83ff4820e87.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 412B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ