Behavioral task
behavioral1
Sample
677c26bcb1e15c12cf89482b70651432a34313c3c59852dfd057cfc711c56f62.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
677c26bcb1e15c12cf89482b70651432a34313c3c59852dfd057cfc711c56f62.exe
Resource
win10v2004-20221111-en
General
-
Target
677c26bcb1e15c12cf89482b70651432a34313c3c59852dfd057cfc711c56f62
-
Size
188KB
-
MD5
7008fb39fc1b9565548c321e5624cb35
-
SHA1
412da8e9b9c521066bad4fe89397b5193c9711d3
-
SHA256
677c26bcb1e15c12cf89482b70651432a34313c3c59852dfd057cfc711c56f62
-
SHA512
d7682d891202375c317443b259f90935622712dfa4131d63e7f7972f0c98d31404e23adaabb0cfc66d7e36355e3d5c53269df47b7a630488f4a20e687dcc5588
-
SSDEEP
3072:g444XBBWG7RMPyWNs3OGtcUdHDsmdV+gzeMt+rj35O1uYIDH6aSvf7/PCkQm+1nl:g4xOGtMPbGO2HDLRzxkP354uYIjcznd6
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
677c26bcb1e15c12cf89482b70651432a34313c3c59852dfd057cfc711c56f62.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 183KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 134KB - Virtual size: 134KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 1024B - Virtual size: 935B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ