Behavioral task
behavioral1
Sample
b52949412843232bec3bf2c630c0564a7cf00e1078049c1be6b4d75c14bfce40.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b52949412843232bec3bf2c630c0564a7cf00e1078049c1be6b4d75c14bfce40.exe
Resource
win10v2004-20220812-en
General
-
Target
b52949412843232bec3bf2c630c0564a7cf00e1078049c1be6b4d75c14bfce40
-
Size
517KB
-
MD5
321913041ae1f956f8a158b977a5c373
-
SHA1
56cac6db4a0a777319855ca6a95d578e3f4ff387
-
SHA256
b52949412843232bec3bf2c630c0564a7cf00e1078049c1be6b4d75c14bfce40
-
SHA512
8869678064c976922e20c3a6f2b13bc8695703055b3bf53ce6b1dbb53339b73fe065aaa0adac430c23aa9f7023719a4c15096d279757046b2a8f862864174240
-
SSDEEP
12288:lQNiWK0qjIQnAYwPzSKcd+K0qjIZSK0qjIQnn:lQNvK0qjIGAYwP+F+K0qjIYK0qjIGn
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b52949412843232bec3bf2c630c0564a7cf00e1078049c1be6b4d75c14bfce40.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 17.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe .js windows x86