Behavioral task
behavioral1
Sample
bd249ca2aa0e3a9cdb27230fff87c2594dcf29708e1ee4d421469f791a33292e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bd249ca2aa0e3a9cdb27230fff87c2594dcf29708e1ee4d421469f791a33292e.exe
Resource
win10v2004-20220812-en
General
-
Target
bd249ca2aa0e3a9cdb27230fff87c2594dcf29708e1ee4d421469f791a33292e
-
Size
522KB
-
MD5
b7b0709c68a9bc3900d5e5971d00f5b2
-
SHA1
903415d5f6f769a6b867cb9b15927daa2f33c865
-
SHA256
bd249ca2aa0e3a9cdb27230fff87c2594dcf29708e1ee4d421469f791a33292e
-
SHA512
54cf92c9b828c8fcc35cfecaf141c9627dbe83da9ed8ce9570ae2caf74359a002adebeb8161f3af914517917bb56b26af28d84cf2a2704eff27ef2faa4f43aac
-
SSDEEP
12288:lQDnSn4K0qjIQnAYwPzSlt2tAK0qjIQnAYwPMI:lQDnXK0qjIGAYwP+WtAK0qjIGAYwPMI
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
bd249ca2aa0e3a9cdb27230fff87c2594dcf29708e1ee4d421469f791a33292e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 17.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe .js windows x86