Behavioral task
behavioral1
Sample
c38dc2daa86f89b8ccbf16283ff9140e7a547703f427f099d38b763eba983a0f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c38dc2daa86f89b8ccbf16283ff9140e7a547703f427f099d38b763eba983a0f.exe
Resource
win10v2004-20220901-en
General
-
Target
c38dc2daa86f89b8ccbf16283ff9140e7a547703f427f099d38b763eba983a0f
-
Size
268KB
-
MD5
cb0e33d376f82011049be79cfefb6854
-
SHA1
6bec9bdd34b340cd637070dde58ed324d9f18253
-
SHA256
c38dc2daa86f89b8ccbf16283ff9140e7a547703f427f099d38b763eba983a0f
-
SHA512
8a7b2fa2654a7f75e53159496f603d176a2a15993b1c2967dbe2bbb0a5e1f0253a43d6e1dc2fadd6ff2dabca0de6397c252836121cac6b2f8a33bffd2309656e
-
SSDEEP
6144:lvI8oK0zat8GzwzkIXfYnPY9lrhdMwPT318Tba5DoK0zav:lQJK0qjIQnAYwPzS3QkK0U
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
c38dc2daa86f89b8ccbf16283ff9140e7a547703f427f099d38b763eba983a0f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 17.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe .js windows x86