Behavioral task
behavioral1
Sample
7aa628f7e8b17f0a4445169d00b85c399fd7a65a8f48dc0f9ac9fdd54dc97c89.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7aa628f7e8b17f0a4445169d00b85c399fd7a65a8f48dc0f9ac9fdd54dc97c89.exe
Resource
win10v2004-20220812-en
General
-
Target
7aa628f7e8b17f0a4445169d00b85c399fd7a65a8f48dc0f9ac9fdd54dc97c89
-
Size
238KB
-
MD5
760921d10817b746bd49a858eba09320
-
SHA1
b7774d3886b32c067bc94babe37f17501ec26552
-
SHA256
7aa628f7e8b17f0a4445169d00b85c399fd7a65a8f48dc0f9ac9fdd54dc97c89
-
SHA512
0f166d22b479c571320151bf421900b13d5c2e6747d82da28be5bf64bcd8503b880564c15f24d0d031b7c187dac983bf5158352cdab775506e8f5919d921b56f
-
SSDEEP
6144:gtUuNVrbzeXDvPTcQsn+AGMViH5urJglfWAe3:9uNV7mv4nGMViwrJg4A2
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
7aa628f7e8b17f0a4445169d00b85c399fd7a65a8f48dc0f9ac9fdd54dc97c89.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 360KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 199KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 340KB - Virtual size: 339KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ