Behavioral task
behavioral1
Sample
2e5f76b237758ccd1aaa1f620d4de1803b6eb5865b77e702db9c7d6f1b41c9c1.exe
Resource
win7-20220901-en
General
-
Target
2e5f76b237758ccd1aaa1f620d4de1803b6eb5865b77e702db9c7d6f1b41c9c1
-
Size
296KB
-
MD5
066245deb36473c7009cc10ebc877310
-
SHA1
b836dd673a6b695d0411131eb0b196697ee668ba
-
SHA256
2e5f76b237758ccd1aaa1f620d4de1803b6eb5865b77e702db9c7d6f1b41c9c1
-
SHA512
385b3cc9e1abea6445c5acd1d7205b7c9e8982cd5baab9bdb16ce0f92205b650055d0ad2b70236c2be5d9b17ce0653fc1beecf7ba3da2d8c6d3692cab2192206
-
SSDEEP
6144:yz7MBJvA+uvaGm1rbg8B1QycvI+ySyNaezDYGQJXROAKTaCyglRzb1:u6Ifa9rN4Y9Ds4afgT
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
2e5f76b237758ccd1aaa1f620d4de1803b6eb5865b77e702db9c7d6f1b41c9c1.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 295KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 252KB - Virtual size: 251KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ