Behavioral task
behavioral1
Sample
d62385d3624b72eb1aa6dc7393f7289d093b438903d3701cc8fb05cf57771c91.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d62385d3624b72eb1aa6dc7393f7289d093b438903d3701cc8fb05cf57771c91.exe
Resource
win10v2004-20220812-en
General
-
Target
d62385d3624b72eb1aa6dc7393f7289d093b438903d3701cc8fb05cf57771c91
-
Size
37KB
-
MD5
32e89e823b48686223d10a4a4fda6546
-
SHA1
108537e617af0f9617e1d177bf425044c9e2979d
-
SHA256
d62385d3624b72eb1aa6dc7393f7289d093b438903d3701cc8fb05cf57771c91
-
SHA512
b540ad7aee57020c41466750bec76a8c8801ffa34b248be7614f796a5b428a9b679c7de3f8d3f6b0b6ee73bce9242b1aa4fdcd81e2a156c54c1f68e616a02c2d
-
SSDEEP
768:shZx40MTjd/gXUEhd6qlJX8Bdfc/VrD4ndxe/s9lROW:shn40MTBIkGsPfc0es9bO
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
d62385d3624b72eb1aa6dc7393f7289d093b438903d3701cc8fb05cf57771c91.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mqgvsod Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: - Virtual size: 2KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 1024B - Virtual size: 2KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 1024B - Virtual size: 656B
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1024B - Virtual size: 1KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ