Behavioral task
behavioral1
Sample
e6f89c4737876491faecdc0ce71abefaa205a114d523f16ad7cb7a0c1ab53f43.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e6f89c4737876491faecdc0ce71abefaa205a114d523f16ad7cb7a0c1ab53f43.exe
Resource
win10v2004-20220901-en
General
-
Target
e6f89c4737876491faecdc0ce71abefaa205a114d523f16ad7cb7a0c1ab53f43
-
Size
155KB
-
MD5
4887c6f2155db2aa01698b384ba87d83
-
SHA1
8056315757f25ef176c809c6990fbbc52a026068
-
SHA256
e6f89c4737876491faecdc0ce71abefaa205a114d523f16ad7cb7a0c1ab53f43
-
SHA512
9ec0b289407220524f2cdd9215a81aad8564933c3d7dc90864532aef8963fb8e949654cd4107a7ed71b0f1d350ea766a30775cfbbc4d2dd18be108ebab6c3c07
-
SSDEEP
3072:z/rmX+6RRGQIeseRPpeM8q6WsLqaLzkGCWg91RM4KEIFcFvZVDe:z/4jRRAeHRLCWA4WKFKEIFcFBVD
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
e6f89c4737876491faecdc0ce71abefaa205a114d523f16ad7cb7a0c1ab53f43.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 147KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 162KB - Virtual size: 161KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 800B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ