Behavioral task
behavioral1
Sample
3090557cd729c5b492296c29635fc2e848ccf390079fbe5846a7b460f9e28ece.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
3090557cd729c5b492296c29635fc2e848ccf390079fbe5846a7b460f9e28ece.exe
Resource
win10v2004-20221111-en
General
-
Target
3090557cd729c5b492296c29635fc2e848ccf390079fbe5846a7b460f9e28ece
-
Size
696KB
-
MD5
010dc2c8c2e8ab8edb3df5e62fa10a54
-
SHA1
f3e61dbd519adcf8667c30456c7a81c83c9f99fd
-
SHA256
3090557cd729c5b492296c29635fc2e848ccf390079fbe5846a7b460f9e28ece
-
SHA512
c042fbee83f4968d893ea3bd1a9a18622bd8438d5ef8a5e8feb4535eb8fe7cab0d252b1d5a8417b12ce6e4a14454e5e43da815610166a5001f7ea534cbae83ad
-
SSDEEP
12288:xRGrg2hRIDBEK8+eCyUjDadnD4Fgh/taJhPOFSrcjCnzB/O2pMbld5WypLEWblWq:xRrOo/e0anD4Fgpty5fAja/OvWGLEWbf
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
3090557cd729c5b492296c29635fc2e848ccf390079fbe5846a7b460f9e28ece.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 732KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 625KB - Virtual size: 628KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 311KB - Virtual size: 311KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 977KB - Virtual size: 977KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ