Behavioral task
behavioral1
Sample
40ab293a65da20e6b6f190093570225469f2d2246215b011745279ca3553f977.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
40ab293a65da20e6b6f190093570225469f2d2246215b011745279ca3553f977.exe
Resource
win10v2004-20221111-en
General
-
Target
40ab293a65da20e6b6f190093570225469f2d2246215b011745279ca3553f977
-
Size
126KB
-
MD5
21e8fc8180ebe09602bfcaafd9c08b80
-
SHA1
0065072312cc98c3d641bc1dccbea9afe65f40bf
-
SHA256
40ab293a65da20e6b6f190093570225469f2d2246215b011745279ca3553f977
-
SHA512
b0e9ae31d1b58f4a6937de6597170500e4ca647a8df7b18d7a9d94c7bbd8aa4bb3b2d06920c6af8e569b9085c08ae5f4063dfa72e64057dcf057ab78b6661b97
-
SSDEEP
3072:GLpvynESVV1IPXq2XbQLhHYakBm0U1i7axbUVMrg:GLgESVQakMuLm11iW1UVb
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
40ab293a65da20e6b6f190093570225469f2d2246215b011745279ca3553f977.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 109KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ