Behavioral task
behavioral1
Sample
ac54a78370164ae62e8c8c769a6ce23665706870f3707c4fd5cd11385fd03c20.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ac54a78370164ae62e8c8c769a6ce23665706870f3707c4fd5cd11385fd03c20.exe
Resource
win10v2004-20221111-en
General
-
Target
ac54a78370164ae62e8c8c769a6ce23665706870f3707c4fd5cd11385fd03c20
-
Size
99KB
-
MD5
9793b742608e2084bc5550c7c0b09567
-
SHA1
ae10ac32dbfdd2a8270add93647235f5d80aa180
-
SHA256
ac54a78370164ae62e8c8c769a6ce23665706870f3707c4fd5cd11385fd03c20
-
SHA512
9ec3ee53e34dc4b9c7efc7fceb85d20ea3396ca113dc1c4264fa41c96219b59b345b1e4e5d7db95afd2e4f3cc58ba6e5ce2c8247d22a77c8786c2e57fdcbcd61
-
SSDEEP
3072:0wi089AvUB1LZPE1AAQvCTjE/j15AY41C:40wB1LlyVb+15AYF
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ac54a78370164ae62e8c8c769a6ce23665706870f3707c4fd5cd11385fd03c20.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 148KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 88KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 200KB - Virtual size: 199KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 13B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ