Behavioral task
behavioral1
Sample
dddf0d3197140e55f90033f72a051a686f073f6eccec7afab65643cb92d47717.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
dddf0d3197140e55f90033f72a051a686f073f6eccec7afab65643cb92d47717.exe
Resource
win10v2004-20220901-en
General
-
Target
dddf0d3197140e55f90033f72a051a686f073f6eccec7afab65643cb92d47717
-
Size
33KB
-
MD5
131c7c44c53a3894b000547f959dac6f
-
SHA1
ff8666542fe2503f324f5b9471fce84730d38b50
-
SHA256
dddf0d3197140e55f90033f72a051a686f073f6eccec7afab65643cb92d47717
-
SHA512
d84a45e3e5b730e42aadcc8f6937ee365dbc06e3ef210c0f92ba8abb5bb3e46d7b1fc6f949d1ddb77115591fd07b491a1defbe0796c6a3b871ac2e1ed75c253c
-
SSDEEP
768:OE17K6SBliQObcAgzGthUo21shUBLyW44Z+L:Xhqdgc2hiNLyh4Z+L
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
dddf0d3197140e55f90033f72a051a686f073f6eccec7afab65643cb92d47717.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 497B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1021B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.arch Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ