Behavioral task
behavioral1
Sample
79afaaa7fa75217d4a771f7f83c5ef4ec7b3dcd9e85deb6767933524ef6b9ee7.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
79afaaa7fa75217d4a771f7f83c5ef4ec7b3dcd9e85deb6767933524ef6b9ee7.exe
Resource
win10v2004-20220721-en
General
-
Target
79afaaa7fa75217d4a771f7f83c5ef4ec7b3dcd9e85deb6767933524ef6b9ee7
-
Size
297KB
-
MD5
b96d7569d68440a9d6fc2f33d8adcae7
-
SHA1
6379a05b3645203df1ec815ee5e81e7aa98088e9
-
SHA256
79afaaa7fa75217d4a771f7f83c5ef4ec7b3dcd9e85deb6767933524ef6b9ee7
-
SHA512
3a69754f4884fd9a47e25f2067fcb4e2afbeeedfe3286ed6e1daeacffbf98692bf84ee6abdfcef83d5b7d7192b34c7652adfea6cd67c96c3556febf8d9d7f33e
-
SSDEEP
6144:pS6MrZzRgkkZ2rorInJp3cSaAQTnoo/75NZ:pkzdk0s0nXc9AQTnoolb
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx
Files
-
79afaaa7fa75217d4a771f7f83c5ef4ec7b3dcd9e85deb6767933524ef6b9ee7.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 184KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 262KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 191KB - Virtual size: 190KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ