Behavioral task
behavioral1
Sample
d7d7966eb25e94adfd3be300c6589a1c0cc6430faf3240fdd69164342997308a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d7d7966eb25e94adfd3be300c6589a1c0cc6430faf3240fdd69164342997308a.exe
Resource
win10v2004-20220812-en
General
-
Target
d7d7966eb25e94adfd3be300c6589a1c0cc6430faf3240fdd69164342997308a
-
Size
187KB
-
MD5
01d065ecb60851b78dd9cbcd961e1810
-
SHA1
27015609f81b49b924b42e75b6626796c95c480a
-
SHA256
d7d7966eb25e94adfd3be300c6589a1c0cc6430faf3240fdd69164342997308a
-
SHA512
83e53e37ad3bb5da670f6baa563acbcea748591f2ff7d96422ee9278531b5e24e3edfcd6a0102ef56b3c8ad9f91a67b7fd207a2273b77320174f61d89fd3764b
-
SSDEEP
3072:woSBc29cT4sWvmjkTvVG5ypzvvZREkgmMAOnRG5iXb/nOC0ItkgK30X9shXugQ:Poq4rmjkTvE+p3OReiXbv0I2v3EGX8
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
d7d7966eb25e94adfd3be300c6589a1c0cc6430faf3240fdd69164342997308a.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 108KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 58KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 107KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ