Behavioral task
behavioral1
Sample
614a988187ac9bc662fb31b5da1d04d03665f4275d348b01be5d2e33edf61b11.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
614a988187ac9bc662fb31b5da1d04d03665f4275d348b01be5d2e33edf61b11.exe
Resource
win10v2004-20220812-en
General
-
Target
614a988187ac9bc662fb31b5da1d04d03665f4275d348b01be5d2e33edf61b11
-
Size
6.3MB
-
MD5
ca01b8b2b50bfebc6fb2d38700a5742f
-
SHA1
9f3552dcce8a04fcaae49d650d3bb62f6566ee6d
-
SHA256
614a988187ac9bc662fb31b5da1d04d03665f4275d348b01be5d2e33edf61b11
-
SHA512
8c416b5e94104ed47fcb122ec6bf215b6b2f75ef168e825bcbb424ac43b1d7a1faeb5ecd83f1968e2e8720eca285ce4748dd6548e919edac8c28640ee56e2b4c
-
SSDEEP
196608:47effIPEsy58doQaTxLhQyZbIly38doQavqU/yE/QT1ymnYChUbTy3yfEQuQoq8A:47effIPEsy58doQaTxLhQyZbIly38doR
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
614a988187ac9bc662fb31b5da1d04d03665f4275d348b01be5d2e33edf61b11.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.bss Size: - Virtual size: 114KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE