Behavioral task
behavioral1
Sample
ef360a82579079f06292febd22b773ef2d0810cc4e9b6af7afce50969109b2da.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ef360a82579079f06292febd22b773ef2d0810cc4e9b6af7afce50969109b2da.exe
Resource
win10v2004-20220812-en
General
-
Target
ef360a82579079f06292febd22b773ef2d0810cc4e9b6af7afce50969109b2da
-
Size
112KB
-
MD5
7f05eacca41c3b4efca3b42cd10b88e7
-
SHA1
662b2a173d43889bb6c9094209777766af6a32a3
-
SHA256
ef360a82579079f06292febd22b773ef2d0810cc4e9b6af7afce50969109b2da
-
SHA512
48258a1dc88f603bb9645678d3e54e94b4222c5fc6696ac28d8e5db6deedd033aca4125bb388bd23894677173f8a4ad6c6f811012a533f070f29815cf61c925a
-
SSDEEP
3072:26DjkEsBS+Ic+MKLIPvMxAjszxfOA1S7F9NSezBpggR19GCq:xb2S+IbIPvpt/7FXSetpgM19+
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ef360a82579079f06292febd22b773ef2d0810cc4e9b6af7afce50969109b2da.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 106KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 388B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ