Behavioral task
behavioral1
Sample
c2cd78e3db2e19b3d2803c3db690234ffcbe410342c8ac8acd20ad46c80e685a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c2cd78e3db2e19b3d2803c3db690234ffcbe410342c8ac8acd20ad46c80e685a.exe
Resource
win10v2004-20220812-en
General
-
Target
c2cd78e3db2e19b3d2803c3db690234ffcbe410342c8ac8acd20ad46c80e685a
-
Size
279KB
-
MD5
9cfd3e3eaafdcfeeaa300e3e47d668d3
-
SHA1
a9838154054a7e54df5739308ae3e4f2ec71198f
-
SHA256
c2cd78e3db2e19b3d2803c3db690234ffcbe410342c8ac8acd20ad46c80e685a
-
SHA512
907199b469f5457ac6b80e081ae8bd1330cf39396cfa11e1198ee46260fc1b3fe01f3638c48306b16f3265a28b93e0a0ad08005ae6a7ffac5de8f7586db406a8
-
SSDEEP
6144:UvLkOuUNcLKBu9J7IWlA3YcAG0AiYe1Do7r:inuUNGbJ7IWlp3hdYe1o
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
c2cd78e3db2e19b3d2803c3db690234ffcbe410342c8ac8acd20ad46c80e685a.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 552KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 145KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 133KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 600KB - Virtual size: 599KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ