Behavioral task
behavioral1
Sample
c0b46ab63a63fe77da3ee56655d6278427ba2dd0020dff82f736bb7a113efbeb.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c0b46ab63a63fe77da3ee56655d6278427ba2dd0020dff82f736bb7a113efbeb.exe
Resource
win10v2004-20221111-en
General
-
Target
c0b46ab63a63fe77da3ee56655d6278427ba2dd0020dff82f736bb7a113efbeb
-
Size
895KB
-
MD5
244b1ae291b0171337e705e7ebc0e169
-
SHA1
5631b8270a8968df6a2a3b16b515c81c1e08c98f
-
SHA256
c0b46ab63a63fe77da3ee56655d6278427ba2dd0020dff82f736bb7a113efbeb
-
SHA512
c41e34468a8bee5cb1ada1e8e2bcf11faeb634fa26f95c3b98e59bb39e94acc8e51d27eef39ced9bdb7495a04e93e1396ef90258d44f5ef9603f1d553dd2d994
-
SSDEEP
24576:F6nx3CzvtJuasfKFEwVzepgItwP2ieX9Twy4:egFJuasyywkpLwOpS
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
c0b46ab63a63fe77da3ee56655d6278427ba2dd0020dff82f736bb7a113efbeb.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 893KB - Virtual size: 896KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 692KB - Virtual size: 691KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 34KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 2B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 127KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ