Static task
static1
Behavioral task
behavioral1
Sample
b2edb4fbce81855d476856b1aa8f298084a4aa6e46b987554dafe8187f5cfab3.exe
Resource
win7-20220414-en
General
-
Target
b2edb4fbce81855d476856b1aa8f298084a4aa6e46b987554dafe8187f5cfab3
-
Size
3.9MB
-
MD5
42e5bcd207d5a1e3c2653b7e4395d9fc
-
SHA1
c64912f0135901d83953aa31dd9878f660af7930
-
SHA256
b2edb4fbce81855d476856b1aa8f298084a4aa6e46b987554dafe8187f5cfab3
-
SHA512
945629d88b41154abb1085174b6fea142f1b96a5810eab4a9125f1d6f08c9fd61488b67e75d882ea35b5160860e30b0f1e2a0b2bc9584e66b1ec88ad0afdafcd
-
SSDEEP
98304:b2tpzpptdlPk/vq1FXRF7LOmt64dcn1mx71J/T+BXuBFBrETg:b8tdcq1FXRxZtcnAJ1REXsBIE
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx
Files
-
b2edb4fbce81855d476856b1aa8f298084a4aa6e46b987554dafe8187f5cfab3.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 244KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 161KB - Virtual size: 161KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ