Behavioral task
behavioral1
Sample
b82a1e1bd89504f3c2b89559caac042ea9b768c5b220e5a94223a0331be1ca4d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b82a1e1bd89504f3c2b89559caac042ea9b768c5b220e5a94223a0331be1ca4d.exe
Resource
win10v2004-20220812-en
General
-
Target
b82a1e1bd89504f3c2b89559caac042ea9b768c5b220e5a94223a0331be1ca4d
-
Size
204KB
-
MD5
8b87d5f11ddc63374b146c1230e25c45
-
SHA1
9c9e30966e3862b9aadf4c55219daf145b110b81
-
SHA256
b82a1e1bd89504f3c2b89559caac042ea9b768c5b220e5a94223a0331be1ca4d
-
SHA512
90c628f9de2683730aed6905171314b101e004fe09584d981043d2c5248b02562f95d57a169ba932d83cbad61c99f71ce77f31582a742b57610ddf1b4b4a9fee
-
SSDEEP
3072:mzndw7+h5feoQFpRLS8VwlwV/6273FtFv2E2K+DqRBYzWxTjyVSBEeAYeZ9SYJN1:mLm7S5fF8RLnVwA6Q1j8W1ukBFAvAzX
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b82a1e1bd89504f3c2b89559caac042ea9b768c5b220e5a94223a0331be1ca4d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 228KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 171KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 326KB - Virtual size: 325KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 13B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 344B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ