Behavioral task
behavioral1
Sample
987b79ec7bd08c3b7ca9a2d365dea7f5c6c79980931317e2982c00327f572228.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
987b79ec7bd08c3b7ca9a2d365dea7f5c6c79980931317e2982c00327f572228.exe
Resource
win10v2004-20221111-en
General
-
Target
987b79ec7bd08c3b7ca9a2d365dea7f5c6c79980931317e2982c00327f572228
-
Size
97KB
-
MD5
5c3d771cb65f38bfbc860da88262d7aa
-
SHA1
0261d2d276e156511a173b9868bc38593080c8cd
-
SHA256
987b79ec7bd08c3b7ca9a2d365dea7f5c6c79980931317e2982c00327f572228
-
SHA512
9710b1b427d1855fe8d5acb462b8f6121f36d1374ae4796a3ad5919d2c1ceafbaca2d1ada51c5780241265fed36d05be4c626c9cbdafa027148c169f18d4272b
-
SSDEEP
1536:nk13TLFXGl0jyutSDgDMia+2FqGxWWA5zB9fPdb8jFLOqPh+KN:+FG2yutSDgoiabrxWdtbk5LAKN
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
987b79ec7bd08c3b7ca9a2d365dea7f5c6c79980931317e2982c00327f572228.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 284KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 85KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe .vbs windows x86