Behavioral task
behavioral1
Sample
6585cb8016bd1d665a32c175016f011ea904761f3e52f6ebf8ad1b423a143736.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6585cb8016bd1d665a32c175016f011ea904761f3e52f6ebf8ad1b423a143736.exe
Resource
win10v2004-20220812-en
General
-
Target
6585cb8016bd1d665a32c175016f011ea904761f3e52f6ebf8ad1b423a143736
-
Size
1.5MB
-
MD5
b4a9bab56f4e33c67d9e8fe4e2d6cd96
-
SHA1
8b9021e58d7b2d697dff52ce7743b0f09bd96142
-
SHA256
6585cb8016bd1d665a32c175016f011ea904761f3e52f6ebf8ad1b423a143736
-
SHA512
d95432db3c3da76d9818e9616d6891f285908af9ae911315858eb1cd8ce169fdc998adf692897cb9035a46fb1537fa832704ca3cdf2aad76998b68b2d99b75e9
-
SSDEEP
49152:QOj7981K5lCkSTuOMN8JmjX/xqQVp/bTA8k:Qq2KmTJ8gyxqu68
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
6585cb8016bd1d665a32c175016f011ea904761f3e52f6ebf8ad1b423a143736.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 128KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ