Behavioral task
behavioral1
Sample
6ae0528f2f05468aac559e4f454a25aa166e75c5d4ef2a85b37518ff2637403b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6ae0528f2f05468aac559e4f454a25aa166e75c5d4ef2a85b37518ff2637403b.exe
Resource
win10v2004-20220812-en
General
-
Target
6ae0528f2f05468aac559e4f454a25aa166e75c5d4ef2a85b37518ff2637403b
-
Size
11.3MB
-
MD5
38682c84b172892f193dae5995cfa323
-
SHA1
d9aa464d36daa55d74743f80e1516b51f9bbc9d4
-
SHA256
6ae0528f2f05468aac559e4f454a25aa166e75c5d4ef2a85b37518ff2637403b
-
SHA512
5e280829325870f1da3c0c0b21f9ea29c7b919f93334328feddd0152abd7b7ca693b779b8b50ee5a82b9ce1b8a499e33b0440d5c104713724720046dcf171174
-
SSDEEP
196608:m9YBxT2x0xdIgS/mG2zKJAJ7ff0PEKIK1DYoPTp3k8E8CEMVZFCChyiGn:m9YBxTDdhcD7250Pdjtk8iEIMCQn
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
6ae0528f2f05468aac559e4f454a25aa166e75c5d4ef2a85b37518ff2637403b.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 409KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 804KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 137KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ