Behavioral task
behavioral1
Sample
b999b99eb04d7875250703f3470e6c95807f99ab92e58b36d72e8f7432ec63b5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b999b99eb04d7875250703f3470e6c95807f99ab92e58b36d72e8f7432ec63b5.exe
Resource
win10v2004-20221111-en
General
-
Target
b999b99eb04d7875250703f3470e6c95807f99ab92e58b36d72e8f7432ec63b5
-
Size
260KB
-
MD5
c2444c92ff72359f88489bfa9724e83e
-
SHA1
1969779ad6feeb8efb6160e77c08bcde61a1507f
-
SHA256
b999b99eb04d7875250703f3470e6c95807f99ab92e58b36d72e8f7432ec63b5
-
SHA512
fdc3b53eeaedb0905ebdcc3fb78b51a0e8fc13720341180bacaa3689914866bfa30d39ebc12c26523fcc7483b85e75d04bbcfa75082d46549ca814af8fdfa1e4
-
SSDEEP
6144:q5clAU/LpXG0wd+v0XnWjAS1xJA2ye/I1P0+DTxXRHS2p:q5cljptwd+vmWPxJPQ1MKTxXBp
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b999b99eb04d7875250703f3470e6c95807f99ab92e58b36d72e8f7432ec63b5.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 258KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 504B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 216KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ