Behavioral task
behavioral1
Sample
8816a90ee1b5309ffe767b58ed000cb55c5535697a255edc88f6e9c403ba7e61.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8816a90ee1b5309ffe767b58ed000cb55c5535697a255edc88f6e9c403ba7e61.exe
Resource
win10v2004-20220812-en
General
-
Target
8816a90ee1b5309ffe767b58ed000cb55c5535697a255edc88f6e9c403ba7e61
-
Size
32KB
-
MD5
9c52e1677a0670f0285c7497b741433e
-
SHA1
3e3b62a1372a644f48541b4658a6d4b0025c09b8
-
SHA256
8816a90ee1b5309ffe767b58ed000cb55c5535697a255edc88f6e9c403ba7e61
-
SHA512
2e0d51950c3fdbd348431c2ff12c803d91c28fefd02d16958f159bff3c8d418fc7db1a187b88450e48e0e22be09a7e96a7876a572e0b9855bb9cce7ba5593d2b
-
SSDEEP
768:G6k5nSb5yLtbwo9tENxMgxWlTYpkJfQQx:G1Sb5yNENHstYyJfB
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
8816a90ee1b5309ffe767b58ed000cb55c5535697a255edc88f6e9c403ba7e61.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe .ps1 windows x86