Behavioral task
behavioral1
Sample
4da77756e37f2ba1b99764651d8da068141766a3a686bd0c9600296f017a936a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4da77756e37f2ba1b99764651d8da068141766a3a686bd0c9600296f017a936a.exe
Resource
win10v2004-20220812-en
General
-
Target
4da77756e37f2ba1b99764651d8da068141766a3a686bd0c9600296f017a936a
-
Size
96KB
-
MD5
4697b494989980c22790a6892624f4e0
-
SHA1
38aaccb2f86aef735f14bb6a9d18db832bcb16b2
-
SHA256
4da77756e37f2ba1b99764651d8da068141766a3a686bd0c9600296f017a936a
-
SHA512
56bd2f19966bce2f9934e310b70237d02865aa36cfd44762af4348f065f2662a54d663da89b3d5036bb8eb62117cb8f8c6382b3eb45c80fb55172644c76061e2
-
SSDEEP
3072:43IW/0S7J5dTzfp220tCz/8J0yzayAHfaNm:H+dPM2WCz/8O9yAHf3
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
4da77756e37f2ba1b99764651d8da068141766a3a686bd0c9600296f017a936a.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ