Behavioral task
behavioral1
Sample
97a28bd291d85fe93fe7411a43aaa5b102687e58342e797d7e239502c1eaeffb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
97a28bd291d85fe93fe7411a43aaa5b102687e58342e797d7e239502c1eaeffb.exe
Resource
win10v2004-20220812-en
General
-
Target
97a28bd291d85fe93fe7411a43aaa5b102687e58342e797d7e239502c1eaeffb
-
Size
228KB
-
MD5
6f17fc4d08e1a58d91ef7aa3e5cb275f
-
SHA1
d04ecb5d2fdf03b64a7b109218fee28f8a975aea
-
SHA256
97a28bd291d85fe93fe7411a43aaa5b102687e58342e797d7e239502c1eaeffb
-
SHA512
6439293941fa12c25420344b616b4a83548e130235200766be7aca92920d60ee95e8be1c5b705cb6af7760660c6eb4c50cb42d94be4f9f5e6af7ba600d496b7c
-
SSDEEP
6144:lvIQ8DzYKCoK0zaUgMqSugaZ4oK0zaUNP8:lQZbK0gnSRqVK09W
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
97a28bd291d85fe93fe7411a43aaa5b102687e58342e797d7e239502c1eaeffb.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 17.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe .js windows x86