Behavioral task
behavioral1
Sample
b2895d49c30b69d920b9bace10dac5578dc68bc0a47bf82c179138ccfaf3dcd2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b2895d49c30b69d920b9bace10dac5578dc68bc0a47bf82c179138ccfaf3dcd2.exe
Resource
win10v2004-20221111-en
General
-
Target
b2895d49c30b69d920b9bace10dac5578dc68bc0a47bf82c179138ccfaf3dcd2
-
Size
12KB
-
MD5
0318a9119b5d008d4d82091607758120
-
SHA1
7a1d16059acaddaa51f799602cb7752e6294a6ce
-
SHA256
b2895d49c30b69d920b9bace10dac5578dc68bc0a47bf82c179138ccfaf3dcd2
-
SHA512
ce21b6f7311b2c38255f2165fa1bdfd8a70902bd89396e25a14325acc15f434d847bcc079c94504aac835223f763f2094acdfbc34086edfcdc422c1f84d522f9
-
SSDEEP
192:KvH/QqNB9ES84KFAGddLMq/xGIXoruJGK1ojdvY8Zk2654hIvslrCnfE37R7:oHb39h8VdeawK1ojPZkz5j7nfs7R7
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b2895d49c30b69d920b9bace10dac5578dc68bc0a47bf82c179138ccfaf3dcd2.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ