Behavioral task
behavioral1
Sample
b2931e98f74c7d49838f98c2eb0207af6af8f79b5b948b4f7ee11e31013d0483.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b2931e98f74c7d49838f98c2eb0207af6af8f79b5b948b4f7ee11e31013d0483.exe
Resource
win10v2004-20220812-en
General
-
Target
b2931e98f74c7d49838f98c2eb0207af6af8f79b5b948b4f7ee11e31013d0483
-
Size
7.4MB
-
MD5
db551e3d0e68f0063594ac61933ac3af
-
SHA1
a33e53c5c8c7c8623b321ed549c5e18a3cd218a8
-
SHA256
b2931e98f74c7d49838f98c2eb0207af6af8f79b5b948b4f7ee11e31013d0483
-
SHA512
b23bef841c783c2388d950c03d9b6a069a8a83a35dc2a69ceb82fa7f398eda9c6b7d936feba9333fb8fded0b0b6067577b4a08cb49f8a4d0987c55d674df34df
-
SSDEEP
196608:47effIPEsy58doQaTzwZ8Jq3QKnqVtxQw818dmXEQl1llLmiwlyif8cHQOyyy5Qv:47effIPEsy58doQaTzwZ8Jq3QKnqVtxz
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b2931e98f74c7d49838f98c2eb0207af6af8f79b5b948b4f7ee11e31013d0483.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.bss Size: - Virtual size: 114KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE