Behavioral task
behavioral1
Sample
e593e16325c864d67d5ddbf8cb7c576d909fbbc42200ceab65d3c34f7ed2e8bf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e593e16325c864d67d5ddbf8cb7c576d909fbbc42200ceab65d3c34f7ed2e8bf.exe
Resource
win10v2004-20220901-en
General
-
Target
e593e16325c864d67d5ddbf8cb7c576d909fbbc42200ceab65d3c34f7ed2e8bf
-
Size
130KB
-
MD5
2097017f3e534231303b62eed7003a20
-
SHA1
e0da198780b9cf2cb0bc51992bd9fd19440e1ca2
-
SHA256
e593e16325c864d67d5ddbf8cb7c576d909fbbc42200ceab65d3c34f7ed2e8bf
-
SHA512
aefb3635d0f9d29bff6394ca4d0754814809e11b6df655f8ed77dd3203a01480b5d4bbd5baff63d00e1bef1a7e8b6ff1ad83965ab85b49515f87769beeed60a0
-
SSDEEP
3072:ZTsKz84dY0K5rKhXx2wUvZp7I9TyIPNm+XaSrvEyYN6PimSSz3GFwCgCDV:Z9z84O7rCxNUvZ2EIHqSoyluub0
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
e593e16325c864d67d5ddbf8cb7c576d909fbbc42200ceab65d3c34f7ed2e8bf.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 108KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 117KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ