Static task
static1
Behavioral task
behavioral1
Sample
79d48a3ed0f3334a06f5d320f065a9ce66a26c38d6449358660a2461c34af7c7.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
79d48a3ed0f3334a06f5d320f065a9ce66a26c38d6449358660a2461c34af7c7.exe
Resource
win10v2004-20220414-en
General
-
Target
79d48a3ed0f3334a06f5d320f065a9ce66a26c38d6449358660a2461c34af7c7
-
Size
332KB
-
MD5
f9a8972e51526c201f2376de26c1cc7a
-
SHA1
71691fdd0db1ac9d62484f49c3deed078d47ceda
-
SHA256
79d48a3ed0f3334a06f5d320f065a9ce66a26c38d6449358660a2461c34af7c7
-
SHA512
471b66003460a34ef5bced228106f64293d2940448541587b0bdb24200df0dcd57ce63fb1d900bfc86a50be8bb5fccad7a352b3c9e80ae9d5c534ca96b8dcdf3
-
SSDEEP
6144:XzXnT9G/pGwT8QJ5Zag6gpdDgSh1vNxiBmyxuPJEmzAgZ4pJZQ:bnTSGwT/J5ZL6gjLvvNxWZxaPkfD
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
79d48a3ed0f3334a06f5d320f065a9ce66a26c38d6449358660a2461c34af7c7.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_SYSTEM
Sections
UPX0 Size: - Virtual size: 67.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 302KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_SYSTEM
Sections
.text Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 66.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 932KB - Virtual size: 931KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ