Behavioral task
behavioral1
Sample
86832170022b1c685ae1d4526cd5beda76272824d9899c26d3ac5c372c1aa5ac.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
86832170022b1c685ae1d4526cd5beda76272824d9899c26d3ac5c372c1aa5ac.exe
Resource
win10v2004-20220812-en
General
-
Target
86832170022b1c685ae1d4526cd5beda76272824d9899c26d3ac5c372c1aa5ac
-
Size
4KB
-
MD5
5d7ff2173e04594caecfb54dd36e5ff0
-
SHA1
d2a8630f58601ff70b0edbcdb3282614b80435b7
-
SHA256
86832170022b1c685ae1d4526cd5beda76272824d9899c26d3ac5c372c1aa5ac
-
SHA512
218edf047e19ec95fc9d5e2399af9873c7a46c3191ed2bddfcfa92136f2dee9b31e0eb005ddbd093e8c476e5c58b621f45be947cc11cbd96e9af5b811dba8403
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
86832170022b1c685ae1d4526cd5beda76272824d9899c26d3ac5c372c1aa5ac.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 720B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE