Behavioral task
behavioral1
Sample
dceac90de8623225614e29fdbffb4c6b3897c701c2487942b92eeaa651d1bc88.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
dceac90de8623225614e29fdbffb4c6b3897c701c2487942b92eeaa651d1bc88.exe
Resource
win10v2004-20221111-en
General
-
Target
dceac90de8623225614e29fdbffb4c6b3897c701c2487942b92eeaa651d1bc88
-
Size
65KB
-
MD5
c388e5c91754907d39910029998e5314
-
SHA1
41eec483ee75871ca25c4502443f6df100b1d49d
-
SHA256
dceac90de8623225614e29fdbffb4c6b3897c701c2487942b92eeaa651d1bc88
-
SHA512
4918da0c855324f90592a25c922d4ddb18ab3957e7bd12fe38f8ac9d60a0daef47f83cc2c15e5db9298c8195343526c434202f1abf892be581f4cd4e00f507a8
-
SSDEEP
768:PTxrUL23qmT5o7B51+6TS+MoE7OIwBbxE7dSxeJk+A7/qb1D9C5nR09QzTGfvg5:15oln+NoESIwBNE7dSxMDA7/q99Q0g
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
dceac90de8623225614e29fdbffb4c6b3897c701c2487942b92eeaa651d1bc88.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 136KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ