Behavioral task
behavioral1
Sample
d7e4706f2d9a22b5035dd6ef7c8a5d8d698d7722a6aaf8f9ceff1476c7f582c6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d7e4706f2d9a22b5035dd6ef7c8a5d8d698d7722a6aaf8f9ceff1476c7f582c6.exe
Resource
win10v2004-20220812-en
General
-
Target
d7e4706f2d9a22b5035dd6ef7c8a5d8d698d7722a6aaf8f9ceff1476c7f582c6
-
Size
215KB
-
MD5
f7a5aaa2a86c190dd1f9a7db49a595f7
-
SHA1
ddf97bdf2298d735f6a082acfbd948d2a3f401b1
-
SHA256
d7e4706f2d9a22b5035dd6ef7c8a5d8d698d7722a6aaf8f9ceff1476c7f582c6
-
SHA512
ea8cd22baf59cda1fe228ddc3710677fe8198d6592850b117b63d625790f7da8102e97d1e8ed4aa98840ca00f0109977987471b44dd4b3573f1c9c9782b63d40
-
SSDEEP
6144:t5EKC9uAJBEFG2796UO+w+VtVaOG2+uc3uttApHO:LDMuAJBuTJ6UO7+dNt+uc30tApHO
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
d7e4706f2d9a22b5035dd6ef7c8a5d8d698d7722a6aaf8f9ceff1476c7f582c6.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 9.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 200KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
DATA Size: 9.1MB - Virtual size: 9.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CODE Size: 178KB - Virtual size: 177KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ