Behavioral task
behavioral1
Sample
581fd64204a2d22a2ee7b5dfec09607b9a492da3a5ac0aa58b397a250f022260.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
581fd64204a2d22a2ee7b5dfec09607b9a492da3a5ac0aa58b397a250f022260.exe
Resource
win10v2004-20220812-en
General
-
Target
581fd64204a2d22a2ee7b5dfec09607b9a492da3a5ac0aa58b397a250f022260
-
Size
1.0MB
-
MD5
6a7b95bf56a46e1684aab77c60779180
-
SHA1
399e9c57a4f8603b92ae510c36f30895b1a31d69
-
SHA256
581fd64204a2d22a2ee7b5dfec09607b9a492da3a5ac0aa58b397a250f022260
-
SHA512
4b8be9a35866185022498d96ef2421da9b17cfc6583d8dccf40ea5cdafd93a4b34adfc1cac96289796f7867addd81790e0d195cee9ee325cb9588432d9b9b3ab
-
SSDEEP
24576:ZgQMmTjsQMmT/Td+F2O/TAKM72E+rXej5iTUae/Y/F:mQpTgQpTA
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
581fd64204a2d22a2ee7b5dfec09607b9a492da3a5ac0aa58b397a250f022260.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 110KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 193KB - Virtual size: 193KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 95KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ