Behavioral task
behavioral1
Sample
b9e79dbf5d2654ea53bd21808daf4eed6b469240459dc4cdd7207c9614243606.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b9e79dbf5d2654ea53bd21808daf4eed6b469240459dc4cdd7207c9614243606.exe
Resource
win10v2004-20220812-en
General
-
Target
b9e79dbf5d2654ea53bd21808daf4eed6b469240459dc4cdd7207c9614243606
-
Size
366KB
-
MD5
81d970b5bbab54c6255e9b662a719ca1
-
SHA1
d1dd3471c118b552977e294ea78fde53d1895f37
-
SHA256
b9e79dbf5d2654ea53bd21808daf4eed6b469240459dc4cdd7207c9614243606
-
SHA512
6781878ea5ca80e28fb8cbcb5a3f485c71522671ee18c11ad3db43c3d33f6ae386f113cf1e7941959e00dba6912f166460c0086db77358626e944b74e2bf4fdf
-
SSDEEP
6144:lvI8loK0zat8GzwzkIXfYnPYzCvoK0zat8GzwzkIXfYnPYfc0k:lQ8qK0qjIQnAzRK0qjIQnAfcl
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b9e79dbf5d2654ea53bd21808daf4eed6b469240459dc4cdd7207c9614243606.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 17.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe .js windows x86