Behavioral task
behavioral1
Sample
4f02198cb9d19df8477b288bc2062b83deb8c3f7ed47cc1d900cc34d26e88b46.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4f02198cb9d19df8477b288bc2062b83deb8c3f7ed47cc1d900cc34d26e88b46.exe
Resource
win10v2004-20220901-en
General
-
Target
4f02198cb9d19df8477b288bc2062b83deb8c3f7ed47cc1d900cc34d26e88b46
-
Size
628KB
-
MD5
61fd6bcd5819e73dad410b52c6aa1cdf
-
SHA1
96baabec1f0a7bbd5ed69b56da2e4c0c68d58d5f
-
SHA256
4f02198cb9d19df8477b288bc2062b83deb8c3f7ed47cc1d900cc34d26e88b46
-
SHA512
9719c7ad994cef96ff1cfba45b7ce905cd3b7758ccc80a0515f75993c95246933706cae1d647b1db347e935536e79e06d22c67a7a6fda54e17fbf36079dd1b08
-
SSDEEP
12288:s5BPYaxO6Rzr45G3fmzJNcVEvmcgcRAYCvWBquXSo6hMPxm:AZdE6Rz1+zJNcOLgoCvWBmhMP
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
4f02198cb9d19df8477b288bc2062b83deb8c3f7ed47cc1d900cc34d26e88b46.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 620KB - Virtual size: 624KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 278KB - Virtual size: 278KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 314KB - Virtual size: 331KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 93KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ