Behavioral task
behavioral1
Sample
518177e80de84886112421b45fea328e918bda5531acc7089fff9b3616142d30.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
518177e80de84886112421b45fea328e918bda5531acc7089fff9b3616142d30.exe
Resource
win10v2004-20220812-en
General
-
Target
518177e80de84886112421b45fea328e918bda5531acc7089fff9b3616142d30
-
Size
677KB
-
MD5
133b34b49ef37523943cd8bfc50ea0b2
-
SHA1
29c8c8750e774939d23a67ecacf1a7d062260b0d
-
SHA256
518177e80de84886112421b45fea328e918bda5531acc7089fff9b3616142d30
-
SHA512
e598588412d84308ec5c981104cc2befa20fee50f00bdb4f098092c54f7213162c803286b39ed8d4b86d05a5a6201f97d1df680891a2a8b870f4196744c62dab
-
SSDEEP
12288:7BKO54V3rQKGAsPvYRQHzH4a/7Avcyu9PkGnoPzo8VGZmMjUEfKZpwJ+WPG:7BKhVkKlyvT/PP7n+tMg2EaZe
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
518177e80de84886112421b45fea328e918bda5531acc7089fff9b3616142d30.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 642KB - Virtual size: 644KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 553KB - Virtual size: 552KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ