Behavioral task
behavioral1
Sample
9728ff7809a67c859417a95136f23c5e3d553ce50de6a52bdc71f8be134acb80.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9728ff7809a67c859417a95136f23c5e3d553ce50de6a52bdc71f8be134acb80.exe
Resource
win10v2004-20220812-en
General
-
Target
9728ff7809a67c859417a95136f23c5e3d553ce50de6a52bdc71f8be134acb80
-
Size
44KB
-
MD5
2bb836a3bf7f70b2af91cb9875812022
-
SHA1
7f1e31664f14df98c75a102572610531367630c9
-
SHA256
9728ff7809a67c859417a95136f23c5e3d553ce50de6a52bdc71f8be134acb80
-
SHA512
187b9cdd1829be488c67afc472abf7d053226899142a3e337fd7bbcbcbcfcb184dbedae832ecbf7d3cbdcec6f9d8f5aef07daac69f45ed261a6a046ffa8ee737
-
SSDEEP
768:btaJCUZK2/DzRb4LYAWOhk1H7or2Dlq91mL8dAIvfEuKP1KrVTIe9d3+5mdBuY4j:YJC722Ln87ahvfEus1KrVFdgmdgY4yK3
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
9728ff7809a67c859417a95136f23c5e3d553ce50de6a52bdc71f8be134acb80.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 854B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ