Behavioral task
behavioral1
Sample
d458e9426c0bafa75e45fca7157216ddf279938e0a3a473ce50f9af3351ba10b.exe
Resource
win7-20220812-en
General
-
Target
d458e9426c0bafa75e45fca7157216ddf279938e0a3a473ce50f9af3351ba10b
-
Size
97KB
-
MD5
616c6b705cda05efd6757f0631f814b5
-
SHA1
2bd77f29455643d99ce6207f139270e2e0e9dc22
-
SHA256
d458e9426c0bafa75e45fca7157216ddf279938e0a3a473ce50f9af3351ba10b
-
SHA512
cbbedab4d937bdff2f0c875c01b6e0f584bdf85fc04ea1295ca1d98ef191a0b65faf20c98e03cb134a932ff999c2287a681bc0586f06c999493150238d6283df
-
SSDEEP
1536:fFOVOeEccdncvtROZffNjVMAczNeCt5cEbjZOGspfxwj6zJyu:fFc+c1kNF5czNDwEb9sRxwuzIu
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
d458e9426c0bafa75e45fca7157216ddf279938e0a3a473ce50f9af3351ba10b.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 224KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 91KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 260KB - Virtual size: 259KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ