Behavioral task
behavioral1
Sample
18ddbaaf25bcd34acb29481309a7ba577f5d4e2af7ca74e8e874ca4cc5324a49.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
18ddbaaf25bcd34acb29481309a7ba577f5d4e2af7ca74e8e874ca4cc5324a49.exe
Resource
win10v2004-20230220-en
General
-
Target
18ddbaaf25bcd34acb29481309a7ba577f5d4e2af7ca74e8e874ca4cc5324a49
-
Size
216KB
-
MD5
a0cebcbd8dc5fc2e72032359f50604cf
-
SHA1
ae9a914fb3adc7528ce3acfd7b8b80c41fb9965b
-
SHA256
18ddbaaf25bcd34acb29481309a7ba577f5d4e2af7ca74e8e874ca4cc5324a49
-
SHA512
a51509898fa575d496e06b8f41733c20d62cec0271e29dca0d6c1da3ff9e70a302cf42db94b34efcec385b83a83a3129cd8e1b4acf4320d21be31038e9070dc4
-
SSDEEP
6144:XzdN5giA7nKkNIKd5UkBIsJ5GFQBUi44frPEzzBd:XzdPginklvBFIIUX4TMn/
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
18ddbaaf25bcd34acb29481309a7ba577f5d4e2af7ca74e8e874ca4cc5324a49.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 348KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 209KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 453KB - Virtual size: 453KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ