Behavioral task
behavioral1
Sample
a8b0a28905e0fbb835a108080dfb847ca46fb5b9b7df17cbdf55a7d522684e00.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a8b0a28905e0fbb835a108080dfb847ca46fb5b9b7df17cbdf55a7d522684e00.exe
Resource
win10v2004-20220812-en
General
-
Target
a8b0a28905e0fbb835a108080dfb847ca46fb5b9b7df17cbdf55a7d522684e00
-
Size
18KB
-
MD5
de9cd38a7f3520245786e4b2ae2811db
-
SHA1
8a1a7b034fd12599a2eba6c87d9b52f712335605
-
SHA256
a8b0a28905e0fbb835a108080dfb847ca46fb5b9b7df17cbdf55a7d522684e00
-
SHA512
41954a51013e5de2ebbe462779d1c766a2f730409ddb48498cc32ea19c43c363f8046b261764bf9d8ab3d17d71e0da67cefbe2da117319fad642aa9941129e6a
-
SSDEEP
384:mkD2ymrGDAxUi2K5xZw0xn5xlnwzW1RYScPmYyjqVaoyagTb0:tVuZ2K5hiqAEqVa1TY
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
a8b0a28905e0fbb835a108080dfb847ca46fb5b9b7df17cbdf55a7d522684e00.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
code Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
data Size: 538B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bss Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
imports Size: 810B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
relocs Size: 330B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resource Size: 520B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ