Behavioral task
behavioral1
Sample
278d509d9c0000e46d6e60c08ead682724510aa16de4571bfb7b082de1c65790.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
278d509d9c0000e46d6e60c08ead682724510aa16de4571bfb7b082de1c65790.exe
Resource
win10v2004-20220812-en
General
-
Target
278d509d9c0000e46d6e60c08ead682724510aa16de4571bfb7b082de1c65790
-
Size
379KB
-
MD5
ec1d1f6ad54bfb0079fb890c4d87882b
-
SHA1
852fc73e1a46a3dea40c5aaf1b1dfa71de83c883
-
SHA256
278d509d9c0000e46d6e60c08ead682724510aa16de4571bfb7b082de1c65790
-
SHA512
ee17c870439e213d7c7d2d5878fb4a081264a52185ce50039438eee15decc682eb9e2c6d98a9dd8491f3c3462b0e39f02af4f77a49af0ac9f9d79a6dfdfc3835
-
SSDEEP
6144:fykBiZOW+ivPIVfXrwsvOFIxk7jkUMYZDST/aDO98ptdM8s4UuCeW8+DKgWy/qL/:fya4OjigvrwsuIaEUMJaKqptyLuHG/Fe
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
278d509d9c0000e46d6e60c08ead682724510aa16de4571bfb7b082de1c65790.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 472KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 300KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 535KB - Virtual size: 535KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ