Behavioral task
behavioral1
Sample
17dab48e992e22d7b4575e6049221426c18990cb511a0dcb116a113a25df945d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
17dab48e992e22d7b4575e6049221426c18990cb511a0dcb116a113a25df945d.exe
Resource
win10v2004-20220901-en
General
-
Target
17dab48e992e22d7b4575e6049221426c18990cb511a0dcb116a113a25df945d
-
Size
5.2MB
-
MD5
445d4c93e82ae26be7145ef3622c8cce
-
SHA1
5a5cd2177c5becb69d917100f160c9c8ecf7f3b4
-
SHA256
17dab48e992e22d7b4575e6049221426c18990cb511a0dcb116a113a25df945d
-
SHA512
69463537f596b7a89a303d970b560719b0268f3a706b3fe4c23a61d745d1cbf440483d1657c4c77377066b2b1e8b0d07e75c46ed00ed96214548981449e0b536
-
SSDEEP
98304:8IlHn2Mj3CzndZAk22+m3LkJNdO/wKZz7a0uR9HkqpDh:80n2+C7ATmkNU51aVzHDxh
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
17dab48e992e22d7b4575e6049221426c18990cb511a0dcb116a113a25df945d.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 500KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 300KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 535KB - Virtual size: 535KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ