Behavioral task
behavioral1
Sample
7339cf71c9ecb3ce179e9345b0b1539a79bd4585816a42278b25f48204fd2cbd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7339cf71c9ecb3ce179e9345b0b1539a79bd4585816a42278b25f48204fd2cbd.exe
Resource
win10v2004-20220901-en
General
-
Target
7339cf71c9ecb3ce179e9345b0b1539a79bd4585816a42278b25f48204fd2cbd
-
Size
4KB
-
MD5
30c3ee849874768958036e5386373b30
-
SHA1
bb02e2cf15fea887d9e7610300b83d12bbe75275
-
SHA256
7339cf71c9ecb3ce179e9345b0b1539a79bd4585816a42278b25f48204fd2cbd
-
SHA512
ebc8d11210cf87f010d19144804d9a47faf65fc50e59093a53960e25bd662f901f1926e5145e9f79681aff9d223ac90386eca7730f723249144bfd9d1af5b0b2
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
7339cf71c9ecb3ce179e9345b0b1539a79bd4585816a42278b25f48204fd2cbd.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 720B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE