Behavioral task
behavioral1
Sample
bbe1db4ba98c9066560206889923013bbd414d7bc56d76c88b94ba069d340b46.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bbe1db4ba98c9066560206889923013bbd414d7bc56d76c88b94ba069d340b46.exe
Resource
win10v2004-20220812-en
General
-
Target
bbe1db4ba98c9066560206889923013bbd414d7bc56d76c88b94ba069d340b46
-
Size
182KB
-
MD5
8854a841e03337aaba0cd72754630950
-
SHA1
58ef788397dbbdd1ba72624c8a54f5dba3c5148a
-
SHA256
bbe1db4ba98c9066560206889923013bbd414d7bc56d76c88b94ba069d340b46
-
SHA512
638f62994962ac807c07e5339b62d077b6265fafef15b8b6fa773b16f979554d06f955545ae76905fdc6f39a29c4de77318dadeafcbc6b6cd70765e4084b58fc
-
SSDEEP
3072:peRZL+doWKiTbHALw30+ovjedeTiZ0+aQ+iM5HFgks+sls:eimUTbH6KovjeMI71+ikf1su
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
bbe1db4ba98c9066560206889923013bbd414d7bc56d76c88b94ba069d340b46.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 110KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
DATA Size: 129KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ