Behavioral task
behavioral1
Sample
ac1a83bb33ac60494d15010d2bbdac3a063e4533b22b7048acb5f909f076ca69.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ac1a83bb33ac60494d15010d2bbdac3a063e4533b22b7048acb5f909f076ca69.exe
Resource
win10v2004-20221111-en
General
-
Target
ac1a83bb33ac60494d15010d2bbdac3a063e4533b22b7048acb5f909f076ca69
-
Size
151KB
-
MD5
13279a7d0e5221638141783f012ed14e
-
SHA1
7eeac62ad5a1f4f5ec0b8ccce4246e0558f5ef6c
-
SHA256
ac1a83bb33ac60494d15010d2bbdac3a063e4533b22b7048acb5f909f076ca69
-
SHA512
52447c0f4b2975baf74c4c82f7ca66b50726a3603a3e0a7d925b3711d73320b242666704224d1e522095cb13da3ae88054b17a8693db96f5dc995beb3e1523b3
-
SSDEEP
3072:UkBrpGwzXIDgxOeWYwz2PThKdwnD/xcyFdX8lNfN4EmBA3+hKFbS:JrhdxU9mlKdwnNxT83KEmK3Hg
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ac1a83bb33ac60494d15010d2bbdac3a063e4533b22b7048acb5f909f076ca69.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 156KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 136KB - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ