Behavioral task
behavioral1
Sample
fc28779e479d613032e62a661861a810587b60e97206be84b6e83caa35a15fa9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fc28779e479d613032e62a661861a810587b60e97206be84b6e83caa35a15fa9.exe
Resource
win10v2004-20220812-en
General
-
Target
fc28779e479d613032e62a661861a810587b60e97206be84b6e83caa35a15fa9
-
Size
201KB
-
MD5
cb85042261c12c5a0fa3415e99d06d0c
-
SHA1
6843ed78177e1f1c5ff55e16113b13e6028778dd
-
SHA256
fc28779e479d613032e62a661861a810587b60e97206be84b6e83caa35a15fa9
-
SHA512
500732d0abdc7859ce099222f206bd6ca81d0cedf338499c3d392c69eb8e6fd0802c9b1cf88d895443c2c40bf5114ee53ddabb0f8eb27815b0c36937522a12b9
-
SSDEEP
6144:yMxSvqCepQvjUEGhOJltCkBaiV7nvVDJMMMMMMe:ytvqiTGUJGi9VrhJMMMMMMe
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
fc28779e479d613032e62a661861a810587b60e97206be84b6e83caa35a15fa9.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 188KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 142KB - Virtual size: 141KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 511B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ