Behavioral task
behavioral1
Sample
9135cd3f6fe6c18ecb7622e8d1805565aa1b579d64141a2fe34b3410d1c644fa.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9135cd3f6fe6c18ecb7622e8d1805565aa1b579d64141a2fe34b3410d1c644fa.exe
Resource
win10v2004-20221111-en
General
-
Target
9135cd3f6fe6c18ecb7622e8d1805565aa1b579d64141a2fe34b3410d1c644fa
-
Size
45KB
-
MD5
010f1f589cc40efb1d5f8946c0d4a620
-
SHA1
a5da14b8d1a002eda685a6ec55a3ae952cf6fcc8
-
SHA256
9135cd3f6fe6c18ecb7622e8d1805565aa1b579d64141a2fe34b3410d1c644fa
-
SHA512
ba9d3321fc8a5d971c684cdaff143664a6bca792a574cfa20c2ab098923db237f3e5e5ff5a805f68e905e106ec6356099d0140a46ea0af8ad59fa5ad4ad85518
-
SSDEEP
768:uzQCvK4hoZAMOY6qhaZIH1BjYNkI1etpkXY6q23gsgq23gs2q23gs0q23gsqq23w:uHvK4hoLFXhsI8kIYtpGOcqYw
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
9135cd3f6fe6c18ecb7622e8d1805565aa1b579d64141a2fe34b3410d1c644fa.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 701KB - Virtual size: 704KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 72KB
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
.idata Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 648KB - Virtual size: 647KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ