Behavioral task
behavioral1
Sample
067eee59d25b3c0f467dc443d6cafe8d17a2fdf31118cba640180b0c0638def0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
067eee59d25b3c0f467dc443d6cafe8d17a2fdf31118cba640180b0c0638def0.exe
Resource
win10v2004-20220812-en
General
-
Target
067eee59d25b3c0f467dc443d6cafe8d17a2fdf31118cba640180b0c0638def0
-
Size
3.4MB
-
MD5
ae68dd0013fc24fa0deb3160eb3cd42d
-
SHA1
393dfb9fb1e60c351fcd7d0d7fe0da891bacf9e4
-
SHA256
067eee59d25b3c0f467dc443d6cafe8d17a2fdf31118cba640180b0c0638def0
-
SHA512
c0385cd3849cf4f06c5da0780d5d58f0cf56e10fd51862fbc801fe7a55fe97caaf59c3b0a3db0441f2dc8d1c7f25500257d8f4bfbbacf72868a43857cce66b37
-
SSDEEP
98304:NpJumq5trnG9N96LJxirJ9JJJJ9xfJfJJkxxJ5:ZernG9PP9JJfxfLJkxx7
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
067eee59d25b3c0f467dc443d6cafe8d17a2fdf31118cba640180b0c0638def0.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 310KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 363KB - Virtual size: 363KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 502KB - Virtual size: 502KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 186KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ