Behavioral task
behavioral1
Sample
ce2ffc2744af9f20ffbf915c0c17b7ce0f74b4d010cb385abb53bc1912515a5a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ce2ffc2744af9f20ffbf915c0c17b7ce0f74b4d010cb385abb53bc1912515a5a.exe
Resource
win10v2004-20221111-en
General
-
Target
ce2ffc2744af9f20ffbf915c0c17b7ce0f74b4d010cb385abb53bc1912515a5a
-
Size
291KB
-
MD5
7265af6664b1956e7c5055309a075c09
-
SHA1
d716fdbce698a8dfd4b75d9c4f9389e8b0f2d2c7
-
SHA256
ce2ffc2744af9f20ffbf915c0c17b7ce0f74b4d010cb385abb53bc1912515a5a
-
SHA512
ef58edcf62f4a67bd3148b67f0cb04cbcaef8a105be7b3d12d4f30c94500a4288b28edc5f4ce71f4c63442c9e77e013f911e15f36e8739488195f2e35672c327
-
SSDEEP
6144:nsaY8p9zkYUJl6SO5+uwk/aO34Yy5PwqqJbXbBJ6cNuLsAH4GhwG:nsaY8rkY4QN/2Yy9wrJ5J6cNuRHxhZ
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ce2ffc2744af9f20ffbf915c0c17b7ce0f74b4d010cb385abb53bc1912515a5a.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ