Behavioral task
behavioral1
Sample
2524706b5b9cdfaa5a31fbaf95989958086af50e1aab1d632c97a9f3eb38e664.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2524706b5b9cdfaa5a31fbaf95989958086af50e1aab1d632c97a9f3eb38e664.exe
Resource
win10v2004-20221111-en
General
-
Target
2524706b5b9cdfaa5a31fbaf95989958086af50e1aab1d632c97a9f3eb38e664
-
Size
895KB
-
MD5
3c63c14babebc877936abb363c6da118
-
SHA1
b4e928b088dfaf8c6beb119fccab340c6d259a8a
-
SHA256
2524706b5b9cdfaa5a31fbaf95989958086af50e1aab1d632c97a9f3eb38e664
-
SHA512
82bf8d7ee5c4f78e0f78f21aca5e7c7ea6776e33492c1c83ec219d09fd64b76a6dd1209a7bb401369731a5d2048173f975a77157e6647c21b2d015c11df8d15a
-
SSDEEP
24576:RS/EKKA1XZCMp5nPPkLuQhHxGTqkEt6Rpu2mGPQ5rBvbMb:RIEKKAHR5PMLu0g7Rppgrx
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx
Files
-
2524706b5b9cdfaa5a31fbaf95989958086af50e1aab1d632c97a9f3eb38e664.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 893KB - Virtual size: 896KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 692KB - Virtual size: 691KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 34KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 2B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 127KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ