Behavioral task
behavioral1
Sample
a351a20255194b223ae3330718130ada81c8f93ddfdb78d36418a605e6df49ac.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a351a20255194b223ae3330718130ada81c8f93ddfdb78d36418a605e6df49ac.exe
Resource
win10v2004-20220901-en
General
-
Target
a351a20255194b223ae3330718130ada81c8f93ddfdb78d36418a605e6df49ac
-
Size
100KB
-
MD5
c0f68942159125e589a095f3f7f9f9cc
-
SHA1
67af4a06b76a70f400c708d31b81f4acc1984896
-
SHA256
a351a20255194b223ae3330718130ada81c8f93ddfdb78d36418a605e6df49ac
-
SHA512
b864424d6d2ccf8b0b69b8ff74373709f9ee979edfee4406a880cbd1673897adf426d3904c2552f9159246459083f05f178ac3371a93135fbba3471e3255ab6e
-
SSDEEP
1536:VzRfPMnXaPhtMT5O230uo5lUdgLKL55yUwoX+7ftAYLppnkOhaAD1p6504y2g:VzNPOaIE2Hoi55Lw/yYvlw6X6zBg
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
a351a20255194b223ae3330718130ada81c8f93ddfdb78d36418a605e6df49ac.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 156KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 89KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 13B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 500B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 156B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ