Behavioral task
behavioral1
Sample
155e418b761db409da4ebd84dc472ae2fe29950e5f90777abb6542b7d92ee0b1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
155e418b761db409da4ebd84dc472ae2fe29950e5f90777abb6542b7d92ee0b1.exe
Resource
win10v2004-20220901-en
General
-
Target
155e418b761db409da4ebd84dc472ae2fe29950e5f90777abb6542b7d92ee0b1
-
Size
308KB
-
MD5
4e68146f075ab1331152198d0e304490
-
SHA1
a29a5d65e5d7b430e0f181d0ccff9460bdb3f14a
-
SHA256
155e418b761db409da4ebd84dc472ae2fe29950e5f90777abb6542b7d92ee0b1
-
SHA512
3c2e9c70d96a4fd8083de0b01475da2eaab4aad744667de8442ffa4c1c044c0723554cbdcc99b89e73b996519036373cd69b0e9eb715438a2e51ac96f8980137
-
SSDEEP
6144:lvI8loK0zat8GzwzkIXfYnPYzCvoK0zat8GzwzkIXkNO:lQ8qK0qjIQnAzRK0qjIKO
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
155e418b761db409da4ebd84dc472ae2fe29950e5f90777abb6542b7d92ee0b1.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 17.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe .js windows x86