Behavioral task
behavioral1
Sample
c526b84c37e494ce93833c1994f356f07b28161b35a7926fc0ac217760f5d00e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c526b84c37e494ce93833c1994f356f07b28161b35a7926fc0ac217760f5d00e.exe
Resource
win10v2004-20220812-en
General
-
Target
c526b84c37e494ce93833c1994f356f07b28161b35a7926fc0ac217760f5d00e
-
Size
296KB
-
MD5
e3dcaaa60a520734954b3dddf45c6445
-
SHA1
2ced50f6ff85b709d8808ffaee2c9233f358d0a6
-
SHA256
c526b84c37e494ce93833c1994f356f07b28161b35a7926fc0ac217760f5d00e
-
SHA512
7a97c0fa1a3037669231ff3ada4d6020b11b3fe0ef7eaba20c1a893b1bbaa0c964f39ac808d1492987208d13814b18b7e0033e4470c0af4cce1f9befd1fc18e1
-
SSDEEP
6144:LB4V9AN3bFF+62kCjCtv7cbZqWknQaU5r8Z/hy3H2x4X9g6qd:F4V9SZsMCj35knZU5r8Z/Ub9c
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
c526b84c37e494ce93833c1994f356f07b28161b35a7926fc0ac217760f5d00e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ