Behavioral task
behavioral1
Sample
15128535d2ac373a3d249b1e1fe76a92c8252da33b590d19200935e4b307122e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
15128535d2ac373a3d249b1e1fe76a92c8252da33b590d19200935e4b307122e.exe
Resource
win10v2004-20221111-en
General
-
Target
15128535d2ac373a3d249b1e1fe76a92c8252da33b590d19200935e4b307122e
-
Size
208KB
-
MD5
8a86dcfff50446111f7b62f12ec9b89e
-
SHA1
e016ea97bbc9289fc5cf9768ffa86ea2884f6410
-
SHA256
15128535d2ac373a3d249b1e1fe76a92c8252da33b590d19200935e4b307122e
-
SHA512
487474e1199c704bf603987673d63d3c085fa225c81f05c8e22673a5f6baf62c8bb4c5a08604c8e3a581651831a2e56bf02bbdc5678700f79522f408c46f957e
-
SSDEEP
3072:55FhEeXl/bsu5mqhLSm0iAwXeyophpWcup3akgH5E+b+V+o7zkO9oHvDqZ:5Pdzsrq5SmXVXey5c0rYW+bkJY3PDq
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
15128535d2ac373a3d249b1e1fe76a92c8252da33b590d19200935e4b307122e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 207KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 405KB - Virtual size: 404KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ