Behavioral task
behavioral1
Sample
6f3df6753630cc50f0ee3291ccb4ec6de62a1ace80a485029e3cefc18535f277.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6f3df6753630cc50f0ee3291ccb4ec6de62a1ace80a485029e3cefc18535f277.exe
Resource
win10v2004-20220901-en
General
-
Target
6f3df6753630cc50f0ee3291ccb4ec6de62a1ace80a485029e3cefc18535f277
-
Size
3.0MB
-
MD5
073192fb8d6883a40feac1198e588b65
-
SHA1
387ee5953d53eb01800ad20fa1aa0714f2a86d02
-
SHA256
6f3df6753630cc50f0ee3291ccb4ec6de62a1ace80a485029e3cefc18535f277
-
SHA512
10441127580cec036602fb5279bfd74e2694ee7fbd2622972189342422d1dfb73f2e70ed305e1f3e57962e35313f7463da2c088c061b1e5dcd93614d8045ac99
-
SSDEEP
49152:R8R5SEIAOOX+M7iCBPTzE5cFr6HN2qu/Ei89S8EJtQVGO4YpjIEof08PZC5A:6R5SEmSiC9TAuwH1RS8UQPLoM8Y5A
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
6f3df6753630cc50f0ee3291ccb4ec6de62a1ace80a485029e3cefc18535f277.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 692KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ