Static task
static1
Behavioral task
behavioral1
Sample
8684ded985154dee21b01d6ffe6d8a0ded49fcaa3dcd23937374310d7cae6d76.exe
Resource
win7-20220414-en
General
-
Target
8684ded985154dee21b01d6ffe6d8a0ded49fcaa3dcd23937374310d7cae6d76
-
Size
138KB
-
MD5
6349f47feb74e0574f263830bd2de0ee
-
SHA1
dd9177300210b0647306b31329b2f760dc6e0c21
-
SHA256
8684ded985154dee21b01d6ffe6d8a0ded49fcaa3dcd23937374310d7cae6d76
-
SHA512
263aa7df76c5ea71d5716059e01e89e90b4deafb0937f9a84570b90d79c4929b6cca72c4c498494d03d98c01b11510ef7630f377226c1003cf8e9c81b574d026
-
SSDEEP
3072:KRVGcrFUTpWH1uOliErFYRCpPTWZRfjECiU:KRwIVPF6CpPTOY0
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx
Files
-
8684ded985154dee21b01d6ffe6d8a0ded49fcaa3dcd23937374310d7cae6d76.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 73.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 86KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 838KB - Virtual size: 73.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ