@GetSecondVice@0
Static task
static1
Behavioral task
behavioral1
Sample
e64d10fd59550cbf84c03100bffd18cb54b12e92f88e9857d3854c4840e874e9.exe
Resource
win7-20220414-en
General
-
Target
e64d10fd59550cbf84c03100bffd18cb54b12e92f88e9857d3854c4840e874e9
-
Size
536KB
-
MD5
f2a197d1fb54e9ba87f8700356803512
-
SHA1
ab62e8f84e421aba4c878d476b3f30af804dae2b
-
SHA256
e64d10fd59550cbf84c03100bffd18cb54b12e92f88e9857d3854c4840e874e9
-
SHA512
ce85de313d37d0afe0782e1c27986fca7e2f1cedd303fe321a49c1c76acad4ff7a91a33390142c1e71a9dfd46d544373584faae3f6ba18bc02e6ce6e528580a8
-
SSDEEP
12288:k7FQ5N1N/G3hoQkfWjzGxMXH9L1O/qDGzVacB8KbUqRudzpOf:kBQ5xO3hgaXXHTlCJacboqEOf
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx
Files
-
e64d10fd59550cbf84c03100bffd18cb54b12e92f88e9857d3854c4840e874e9.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 67.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 506KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Exports
Exports
Sections
.text Size: 478KB - Virtual size: 477KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 61KB - Virtual size: 66.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.puk Size: 1024B - Virtual size: 626B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.siz Size: 1024B - Virtual size: 624B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 937KB - Virtual size: 936KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ