Behavioral task
behavioral1
Sample
694ba818569c43e84de84d6b8954b14bdbc58d712f1d4abfd0a86eb38c1f5b96.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
694ba818569c43e84de84d6b8954b14bdbc58d712f1d4abfd0a86eb38c1f5b96.exe
Resource
win10v2004-20220812-en
General
-
Target
694ba818569c43e84de84d6b8954b14bdbc58d712f1d4abfd0a86eb38c1f5b96
-
Size
741KB
-
MD5
9665b1b43fd1c8b9d7bc0b508d3ffd64
-
SHA1
188711128bfd5b2d8eb5ddee049eb62877b0f6c6
-
SHA256
694ba818569c43e84de84d6b8954b14bdbc58d712f1d4abfd0a86eb38c1f5b96
-
SHA512
c4815f66c26849d35f0c6cf9cdec43020a6e4e884d00738d442bb028c97bd3fc9dcdd205b7e0c4a67fba143a6ab05a9246393b907eb6a947db14aeec220ea70e
-
SSDEEP
12288:wR8Rse1mjc0DZD2IB5XdNtr8O5LWrMEGKe5eb1tfznbco37/p0YnAXu6bMlY5GLW:wRYUj7JBFPxdLWrPGKeEbH97iY76bMaT
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
694ba818569c43e84de84d6b8954b14bdbc58d712f1d4abfd0a86eb38c1f5b96.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 357KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 383KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 535KB - Virtual size: 534KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 701KB - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ