Behavioral task
behavioral1
Sample
f2682b74bd41d0097536ef9c7cd464be8d6560a4ed0dc7ccf42567fe55b83bb4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f2682b74bd41d0097536ef9c7cd464be8d6560a4ed0dc7ccf42567fe55b83bb4.exe
Resource
win10v2004-20221111-en
General
-
Target
f2682b74bd41d0097536ef9c7cd464be8d6560a4ed0dc7ccf42567fe55b83bb4
-
Size
260KB
-
MD5
aab2ba63a4493d756bb45242c0b6869a
-
SHA1
0d2dce3ec59d7e4bf6d8be2897dbcfc8a180f97c
-
SHA256
f2682b74bd41d0097536ef9c7cd464be8d6560a4ed0dc7ccf42567fe55b83bb4
-
SHA512
2c95bebb384f3823300097e0278df415b2717f27c3794b9f3a84f845fd5ed23ab6278e8fe02b7cd564dcddcbbf78eb5a7cf495e801fce64322b1e17678c9eecc
-
SSDEEP
6144:evjwOpGmM+UE/sMYyiM4gRXwPC6FBwINL:owbm5UJW51w3FD
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f2682b74bd41d0097536ef9c7cd464be8d6560a4ed0dc7ccf42567fe55b83bb4.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 288KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 347KB - Virtual size: 346KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 13B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 428B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ