Behavioral task
behavioral1
Sample
cf0b2a00742bae49b3289fefff0181389309e739be08b04b58260ec3366d565f.exe
Resource
win7-20220812-en
General
-
Target
cf0b2a00742bae49b3289fefff0181389309e739be08b04b58260ec3366d565f
-
Size
90KB
-
MD5
a22be6bf6737b253ee7e7fc8c6ff8a1b
-
SHA1
62fd9555c4452abfefef3a167d8e472d82c5a301
-
SHA256
cf0b2a00742bae49b3289fefff0181389309e739be08b04b58260ec3366d565f
-
SHA512
b8120677ea8404a7cb8834a6e66bc385a05ea68f11893f00290bf61756de5b6c07bee1653d6dbb191ba5cce6933d8b5745518d66239ebbdd5506003260b4145a
-
SSDEEP
1536:si/mXq4giJ5BeolLArZc3PbEb4wmbFBMKaWTuryHG+CImAewTs/SV:si/4gifjl8KzSDmbFBM1DLddAecs6V
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
cf0b2a00742bae49b3289fefff0181389309e739be08b04b58260ec3366d565f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 332B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ