Behavioral task
behavioral1
Sample
f5433e789e5c2b92c57051979bebd0114ecf8e3bea7348d3c568cb4d93bf080d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f5433e789e5c2b92c57051979bebd0114ecf8e3bea7348d3c568cb4d93bf080d.exe
Resource
win10v2004-20221111-en
General
-
Target
f5433e789e5c2b92c57051979bebd0114ecf8e3bea7348d3c568cb4d93bf080d
-
Size
1.1MB
-
MD5
037292e7eb16b4fdba55bc31e26c8e7b
-
SHA1
e9947b3f41b5f877454a46064c25804afe5de78f
-
SHA256
f5433e789e5c2b92c57051979bebd0114ecf8e3bea7348d3c568cb4d93bf080d
-
SHA512
d33391353c1889d7150121411df95736a710b77d84e5bd8811be49ef14c1072f07e9318dede5cbc4be9ba3204d34450a1ad7a891abde25e4a23674cf539b298d
-
SSDEEP
24576:RxFiD2fp5c0w4I+bU2VBoC+sinDBdTYpkt/fHLlo:TFiSfp5LTo2FRuDBdTYpkdrlo
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f5433e789e5c2b92c57051979bebd0114ecf8e3bea7348d3c568cb4d93bf080d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 952KB - Virtual size: 956KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 133KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 853KB - Virtual size: 852KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 21KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_MEM_DISCARDABLE
.idata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 439KB - Virtual size: 438KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE