Behavioral task
behavioral1
Sample
4d1d106e3b3c90271cd475da3679bf92315f0452afe1019bbb44b74b11fb1df6.exe
Resource
win7-20220812-en
General
-
Target
4d1d106e3b3c90271cd475da3679bf92315f0452afe1019bbb44b74b11fb1df6
-
Size
55KB
-
MD5
61f7f68e6103bdc9ee3f0db413f83880
-
SHA1
4fce37a6d4dac2b5a9068559124e2d3e38904afa
-
SHA256
4d1d106e3b3c90271cd475da3679bf92315f0452afe1019bbb44b74b11fb1df6
-
SHA512
2e5a284542e6019b99e337f9c9f32f70aead4a27a0688b32694f99a8b4911b109dbd0d65aecaa8876f97f070edc316f99026aa50a8c7dcba012a9a0c640313b1
-
SSDEEP
768:gOz7xwyjQR2TEYn66wM3pJ62Kw7FNfvDt2z5AhSuvLjB19yBs+LCvKGK5uLuLD3S:9aKz1n66z6a7zfv4hWB1c++L6ZLuLM/
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
4d1d106e3b3c90271cd475da3679bf92315f0452afe1019bbb44b74b11fb1df6.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 564B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ