Behavioral task
behavioral1
Sample
85b81dba7fae8b3a9f8ba0486e4555638378017cac08886d4285d3f593b5d810.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
85b81dba7fae8b3a9f8ba0486e4555638378017cac08886d4285d3f593b5d810.exe
Resource
win10v2004-20220812-en
General
-
Target
85b81dba7fae8b3a9f8ba0486e4555638378017cac08886d4285d3f593b5d810
-
Size
4KB
-
MD5
a22a1eccfcf6ed77b83abad89c20f480
-
SHA1
dece6c52fd00dc66255cd8c9c388586b9c346637
-
SHA256
85b81dba7fae8b3a9f8ba0486e4555638378017cac08886d4285d3f593b5d810
-
SHA512
407a03403db7c1458abe58cd51bff0d7140438d57c9cb6d44178cab08ed8578dc860174c00163a4f51894c5e4e1a01978c09bdb15dd82b37ee72a5be282fc107
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
85b81dba7fae8b3a9f8ba0486e4555638378017cac08886d4285d3f593b5d810.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 720B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE