Behavioral task
behavioral1
Sample
df0da20e24bf10c730f69cac7ac39c4d12f4f04528b58b0327c977d37093770a.exe
Resource
win7-20220812-en
General
-
Target
df0da20e24bf10c730f69cac7ac39c4d12f4f04528b58b0327c977d37093770a
-
Size
52KB
-
MD5
0018d659d07b5e92aeed7701ef41d003
-
SHA1
e85bbba85f6d70281f5b211abaabea41b0de4aa5
-
SHA256
df0da20e24bf10c730f69cac7ac39c4d12f4f04528b58b0327c977d37093770a
-
SHA512
aab7ca43da389039346a5829eb8cf157880289c76c6059fef47213d54a7c9897b8e567904b370c42f2c3d17cacdb9fc20b01ec3c4c4a5f27472673694c5207ff
-
SSDEEP
768:rYyWWjc2w9ppWD4zY317Qyo9oR234PUkWcP+41PWprqmxKw0WhpUbcvAiO:us3p/o9p2WcP+0PyxKw04UbH
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
df0da20e24bf10c730f69cac7ac39c4d12f4f04528b58b0327c977d37093770a.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 554B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ