Static task
static1
Behavioral task
behavioral1
Sample
5479eb1689d8a881fc4dcbf71d6c3d3790a13e9f7f0c5301ce7b640bc3a28d61.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
5479eb1689d8a881fc4dcbf71d6c3d3790a13e9f7f0c5301ce7b640bc3a28d61.exe
Resource
win10v2004-20220414-en
General
-
Target
5479eb1689d8a881fc4dcbf71d6c3d3790a13e9f7f0c5301ce7b640bc3a28d61
-
Size
339KB
-
MD5
3cc0c16920f6511314974d054b3d1ae6
-
SHA1
b7f26817011ed9623e9ddec1ac98dc9ee5885b6d
-
SHA256
5479eb1689d8a881fc4dcbf71d6c3d3790a13e9f7f0c5301ce7b640bc3a28d61
-
SHA512
7b481182709eb32dd049a5ff2891ff6287a1ab3fea73cf8a13edef99913ef7dcdb813c2a01202136b370d344fbcd4ab3ba3662ee78dfb5442a2b6ad5d2a8e9fa
-
SSDEEP
6144:lzyVP3+YHCOW2WNi2wfyMs9t1x0PlNyK0m+uH8VNiY4jWJ0SLfAM3pWQA:hyh5iOtW1+yMs9t1xSNyK0mmVWjWJv98
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx
Files
-
5479eb1689d8a881fc4dcbf71d6c3d3790a13e9f7f0c5301ce7b640bc3a28d61.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 67.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 309KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 307KB - Virtual size: 307KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 66.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 939KB - Virtual size: 938KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ