Behavioral task
behavioral1
Sample
c092ecb49844c0da8bc84d12d501f39dfd69ef8b376292ce8b9d3db85ff5a0e8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c092ecb49844c0da8bc84d12d501f39dfd69ef8b376292ce8b9d3db85ff5a0e8.exe
Resource
win10v2004-20220901-en
General
-
Target
c092ecb49844c0da8bc84d12d501f39dfd69ef8b376292ce8b9d3db85ff5a0e8
-
Size
230KB
-
MD5
91aa17d6c5f9f0c339f8dec4590036d0
-
SHA1
d04801cc17ac59fd96138f6f73647bd84e669e0c
-
SHA256
c092ecb49844c0da8bc84d12d501f39dfd69ef8b376292ce8b9d3db85ff5a0e8
-
SHA512
fb4e0bde18bc3ad7d72fb167d92a75fb38973f952b28bfe0437b60a6e3c036eeb235aec8537baf2e187b6d9ae8337cce6f603e486e339c32359fd5c8c12efde0
-
SSDEEP
6144:EIqyjehPLTQ+Ygd29WPVvbeYEulxUZyCaZr6XR3:l8LvzEul0y/S1
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
c092ecb49844c0da8bc84d12d501f39dfd69ef8b376292ce8b9d3db85ff5a0e8.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 428KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 204KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 278KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 160KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ