Behavioral task
behavioral1
Sample
807c8790ef3daa79937c923a951410dc030422d108a680d08b531d6a4fbe9f5d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
807c8790ef3daa79937c923a951410dc030422d108a680d08b531d6a4fbe9f5d.exe
Resource
win10v2004-20220812-en
General
-
Target
807c8790ef3daa79937c923a951410dc030422d108a680d08b531d6a4fbe9f5d
-
Size
187KB
-
MD5
013309ee0193000d0e0b2add2afd0d00
-
SHA1
5a6e3dc9140d4e33bcefec79533d98993cd4f193
-
SHA256
807c8790ef3daa79937c923a951410dc030422d108a680d08b531d6a4fbe9f5d
-
SHA512
c82d879ec8d434f89203e88de59d970eb39caf41fe7b09bb1c944fca059449b2926870622d72fb7c5f3a15c5957b8f43aaac255601c0aaa7ac3a7d1e7351d463
-
SSDEEP
3072:joSBc29cT4sWvmjkTvw/mLdU8+e+GqaYm+IYNMkDFywCUHenv3Sy/4v8SaC19IQ:soq4rmjkTvikdfQvmzYNT5yVxiEaQC1F
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
807c8790ef3daa79937c923a951410dc030422d108a680d08b531d6a4fbe9f5d.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 108KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 58KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 107KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ