Behavioral task
behavioral1
Sample
dee19185db69266d8650df53ccbeb7e2a190381f2d518d7f45e0479747d4e40d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
dee19185db69266d8650df53ccbeb7e2a190381f2d518d7f45e0479747d4e40d.exe
Resource
win10v2004-20220812-en
General
-
Target
dee19185db69266d8650df53ccbeb7e2a190381f2d518d7f45e0479747d4e40d
-
Size
2.6MB
-
MD5
b080ac78954dd5cb96f5a15cb82d7700
-
SHA1
e87231d6295e38a8276311ec4103a10ad0ba16d9
-
SHA256
dee19185db69266d8650df53ccbeb7e2a190381f2d518d7f45e0479747d4e40d
-
SHA512
54b52bc23f725a1b08d0a347383a8b7cd6ba6395967dd08dd3868a22c7dbce08e4536332fc76b2878ccb5a9ec9300b124dd6e2f8876f69e494e5e838e7bb0139
-
SSDEEP
49152:XTXlth+H3UJzkiJzdwalyBh9MROs8xfr89WwvHinbSX3zaRLygNn:rlP+kJzkcBwYy39MROs8xfr8rfinbY36
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
dee19185db69266d8650df53ccbeb7e2a190381f2d518d7f45e0479747d4e40d.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 224KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 81KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 98KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 139KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ