Behavioral task
behavioral1
Sample
13076e517335315a8bc2d17ec5927ab1050f124ffadafd76ce6248351aa8b8e1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
13076e517335315a8bc2d17ec5927ab1050f124ffadafd76ce6248351aa8b8e1.exe
Resource
win10v2004-20220812-en
General
-
Target
13076e517335315a8bc2d17ec5927ab1050f124ffadafd76ce6248351aa8b8e1
-
Size
454KB
-
MD5
c48bac6bf80c37d31c1cc113d2ecfeed
-
SHA1
30b5779b86a072eebd6a93b0ece3a40c17d8e101
-
SHA256
13076e517335315a8bc2d17ec5927ab1050f124ffadafd76ce6248351aa8b8e1
-
SHA512
79e72f666c1161d90cd9d348d4d8e037258bec0f11db619bd92457f1d757c43b79357c5f70fd2e4865799d8a7113306e6f04b57fc9637f2c3ccb97e709966065
-
SSDEEP
12288:vkKufakcskSLOKAxaZG2XT3YcSj/LhwHuJ0zqRVzAhOi:stayFDk2bYbj/LolzOVz
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
13076e517335315a8bc2d17ec5927ab1050f124ffadafd76ce6248351aa8b8e1.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 628KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 443KB - Virtual size: 444KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE