Behavioral task
behavioral1
Sample
870ebaacad95fbbebf6acd724d3d8b5b16f63101469b327cf26d2e594f382ae8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
870ebaacad95fbbebf6acd724d3d8b5b16f63101469b327cf26d2e594f382ae8.exe
Resource
win10v2004-20220901-en
General
-
Target
870ebaacad95fbbebf6acd724d3d8b5b16f63101469b327cf26d2e594f382ae8
-
Size
4KB
-
MD5
69258f11aaa5808469fdbaaa15c0ac40
-
SHA1
21f271fc3c8f361de4be873ecee720c5d3f62c9a
-
SHA256
870ebaacad95fbbebf6acd724d3d8b5b16f63101469b327cf26d2e594f382ae8
-
SHA512
406c8b3d03c8381731e8adbf65a0da2d27c1ed41dd58f8ac093a1343fc802d267b8a260c8cdaf73af4dbf874c795a76237e7a6f6974deb20e6802a1c0ae4e9a5
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
870ebaacad95fbbebf6acd724d3d8b5b16f63101469b327cf26d2e594f382ae8.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 720B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE