Behavioral task
behavioral1
Sample
a160b1b30815dec612993f544a02e2990a65e52f9325dbb00d4ac3a033c707fb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a160b1b30815dec612993f544a02e2990a65e52f9325dbb00d4ac3a033c707fb.exe
Resource
win10v2004-20220812-en
General
-
Target
a160b1b30815dec612993f544a02e2990a65e52f9325dbb00d4ac3a033c707fb
-
Size
247KB
-
MD5
2c06d52fde620c1bbd96f368191fbb71
-
SHA1
22499cf8625d3f9c6643e5f03ca4238ed727384c
-
SHA256
a160b1b30815dec612993f544a02e2990a65e52f9325dbb00d4ac3a033c707fb
-
SHA512
1c4bf526b07682d1372e53f7248d46de7225affa0ea21ff1ae98dd404fcf4fc1a068ea424dbfd45704797cc3f6688f378cbeb340aff3dc03ebdeac2bef87e3bf
-
SSDEEP
6144:qoKlfRTcq24Vg2YK9Ic5F5vSmTJC61RgIiL:M24V2K9xTT1o
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
a160b1b30815dec612993f544a02e2990a65e52f9325dbb00d4ac3a033c707fb.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 280KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 171KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 326KB - Virtual size: 326KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 13B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 428B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ