Behavioral task
behavioral1
Sample
9fbba18a734fcd66d3fda0b7b827cb00c2377249572275deb2fd4a473fce1bb9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9fbba18a734fcd66d3fda0b7b827cb00c2377249572275deb2fd4a473fce1bb9.exe
Resource
win10v2004-20220812-en
General
-
Target
9fbba18a734fcd66d3fda0b7b827cb00c2377249572275deb2fd4a473fce1bb9
-
Size
10.7MB
-
MD5
fe456375b1adec70406c22b80aeabd4a
-
SHA1
5773e891f1c26b8daff41f42310dbab30d5cd139
-
SHA256
9fbba18a734fcd66d3fda0b7b827cb00c2377249572275deb2fd4a473fce1bb9
-
SHA512
4ecd2b3c82792c54f6fef6f9e14a38048ee127213f5e10e462bb35c3e33f45eb40cfa0865e59e792ae54776fd428498f738f3a12694efa80d0b053c0618e4534
-
SSDEEP
196608:Vvl5q1Cn1kq+lE53DkhmKN29Z47nFxl/qQSv0/MZfvFxdSGob3pi:JoCKq+GTqJcanFT/qQSwMZrdFr
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
9fbba18a734fcd66d3fda0b7b827cb00c2377249572275deb2fd4a473fce1bb9.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 532KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 102KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 292KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 166KB - Virtual size: 165KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 296KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ