Behavioral task
behavioral1
Sample
91431f25e7f5ee23336d2a0593f8818621d55c2eb8d9e99d34f9b2fcfd4fc2a9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
91431f25e7f5ee23336d2a0593f8818621d55c2eb8d9e99d34f9b2fcfd4fc2a9.exe
Resource
win10v2004-20220812-en
General
-
Target
91431f25e7f5ee23336d2a0593f8818621d55c2eb8d9e99d34f9b2fcfd4fc2a9
-
Size
4.7MB
-
MD5
95e26fdc586bb689da8532791521f9c4
-
SHA1
2238f1a7580710e4f9d0273137b43073ddfab25c
-
SHA256
91431f25e7f5ee23336d2a0593f8818621d55c2eb8d9e99d34f9b2fcfd4fc2a9
-
SHA512
95ce34acd3fd2881a20e1b8753d2ff713903e9e0ba954013034fd5be90e99eb4b1d23d153b0a37c0095cad76c55ed680a7038a63a6c248fbe111ead4b0c4c732
-
SSDEEP
98304:kb7yolplHT5iciuuP5cAdwsAVmwLdjGVd136G3XV/c4/e3nb/+3uHP+i9hTnMFiq:kbXflU7DkC1z4+aTnD/eDmeN
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
91431f25e7f5ee23336d2a0593f8818621d55c2eb8d9e99d34f9b2fcfd4fc2a9.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.6MB - Virtual size: 4.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 276KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text1 Size: 192KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5.5MB - Virtual size: 5.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE