Behavioral task
behavioral1
Sample
a794c722c8cea679fdc80ade456fe22bf67ade1dc7c833e743decd0d68d7608d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a794c722c8cea679fdc80ade456fe22bf67ade1dc7c833e743decd0d68d7608d.exe
Resource
win10v2004-20221111-en
General
-
Target
a794c722c8cea679fdc80ade456fe22bf67ade1dc7c833e743decd0d68d7608d
-
Size
12KB
-
MD5
4510373ae0d9008533e3d5d1cbdb60f6
-
SHA1
695c8eaa80c525f907451adda565aac983d06db7
-
SHA256
a794c722c8cea679fdc80ade456fe22bf67ade1dc7c833e743decd0d68d7608d
-
SHA512
18f159be37fe293fae08c3980c98b4fc819fe2a12c03eba4dad398b14ba25ede34250231ca0845402a67e560126d3f756ea4a5e511a226dee6529d1c8c0500a0
-
SSDEEP
192:nm81a0esjfJBdmDTOcawdMFalQG8y4PslYm/aAM6hnz8pqPfaJfnwKBz8LVhmp+K:Rc03mqYlL8y4kZwgn4wKBz8LXdY0kLb
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
a794c722c8cea679fdc80ade456fe22bf67ade1dc7c833e743decd0d68d7608d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 632B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ