Behavioral task
behavioral1
Sample
a33191bad11c4762e38759114548e277f8af9efa9c557e254184a622ee06681d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a33191bad11c4762e38759114548e277f8af9efa9c557e254184a622ee06681d.exe
Resource
win10v2004-20221111-en
General
-
Target
a33191bad11c4762e38759114548e277f8af9efa9c557e254184a622ee06681d
-
Size
632KB
-
MD5
b2c5f3ebef35e7fd82b7ccf35c7380eb
-
SHA1
13ba8f81e11379e5bbc32ee6276db863519b8b3e
-
SHA256
a33191bad11c4762e38759114548e277f8af9efa9c557e254184a622ee06681d
-
SHA512
c587baff3569f71079766a31f502e1b317abe0298cee4c19d1899cb6862ea208e51837ad7bcc48787d877706bd504209909d7ca8336f7be13ec3d2cdea4d9d8c
-
SSDEEP
12288:lQZbK0gDK0qjIQnAYwPzSlt2t4FXOWQevzOU1hwwcaJ:lQZK0sK0qjIGAYwP+Wt4hOWRzxDw4J
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
a33191bad11c4762e38759114548e277f8af9efa9c557e254184a622ee06681d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 17.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe .js windows x86