Behavioral task
behavioral1
Sample
b88c5bd6ca3549fb698d5f205c63202e7a54e0942838268aefbcbddb0497df91.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b88c5bd6ca3549fb698d5f205c63202e7a54e0942838268aefbcbddb0497df91.exe
Resource
win10v2004-20221111-en
General
-
Target
b88c5bd6ca3549fb698d5f205c63202e7a54e0942838268aefbcbddb0497df91
-
Size
298KB
-
MD5
773204013d1e21aca794f86db3c084f8
-
SHA1
7917ec8c5032f036b50898bc7a8a1f37bf619e05
-
SHA256
b88c5bd6ca3549fb698d5f205c63202e7a54e0942838268aefbcbddb0497df91
-
SHA512
9597782278c71ef8f4d616d122b42485895edabece32336096758ab74aef1226af64c2a5c0e47e7ac2f88dc006e4dec9e73d431ca56fe1199c8779449dec67fe
-
SSDEEP
6144:3vEA0m9QJ+JKV1qp3xhOM73JKcuGfPLqHNunrIZlm2X0mpRe1:3M89QJ+JK3IJkCKzlX0mPe
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b88c5bd6ca3549fb698d5f205c63202e7a54e0942838268aefbcbddb0497df91.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 484KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 293KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 626KB - Virtual size: 625KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 32B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ