Behavioral task
behavioral1
Sample
dbe4d20c3c42d727525cc66c310775e9461d90ac4e26a5742b68b3de06102a7c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dbe4d20c3c42d727525cc66c310775e9461d90ac4e26a5742b68b3de06102a7c.exe
Resource
win10v2004-20220901-en
General
-
Target
dbe4d20c3c42d727525cc66c310775e9461d90ac4e26a5742b68b3de06102a7c
-
Size
11.8MB
-
MD5
87e560a4597457c87213b6d9092065e1
-
SHA1
d1e1ec9911715f77337438e2856feab7433bdafd
-
SHA256
dbe4d20c3c42d727525cc66c310775e9461d90ac4e26a5742b68b3de06102a7c
-
SHA512
764db1ab3c840af7c139f2e474040a869d4bfefba028b98128f8ea167a0611a8c08365c4e58f76277e0ef319466bbba6a0412c75e9e14d0668d4be382be632ed
-
SSDEEP
196608:x3zll9JXfIkBNO6GA7oohyZWaH5aR39+4xq/8i8p79q6xVpzmhs/0gNU3Y8I:x3zb9J5BNO8tCERNbBA6x3me7NU3Y8I
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
dbe4d20c3c42d727525cc66c310775e9461d90ac4e26a5742b68b3de06102a7c.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 81KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 139KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ