Behavioral task
behavioral1
Sample
678be88fdda46c9af77ba69ce119221c802f03c937e54f7b214ec0f153a3aedd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
678be88fdda46c9af77ba69ce119221c802f03c937e54f7b214ec0f153a3aedd.exe
Resource
win10-20220901-en
General
-
Target
678be88fdda46c9af77ba69ce119221c802f03c937e54f7b214ec0f153a3aedd
-
Size
96KB
-
MD5
a96c2c23a6a7c77eacb4514c45614438
-
SHA1
1a4273cdcf66ca65d42960ea11f353555ce5fd34
-
SHA256
678be88fdda46c9af77ba69ce119221c802f03c937e54f7b214ec0f153a3aedd
-
SHA512
60b2abf9a87af0f9feb04855bace362e7f1f30a8c2a31d0a85595bb8b322bf541e159fec8246f189fae85c8c328a649ffeced6918e6852599272f509cca6b1c7
-
SSDEEP
3072:SFrPM3xsXfdMhU0tPyhDMzkwXzQhrW4soTD7aMUot:SFbMSaLQhDMzkwXzqsEHaA
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
678be88fdda46c9af77ba69ce119221c802f03c937e54f7b214ec0f153a3aedd.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 128KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 127KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ