Behavioral task
behavioral1
Sample
83dd87a95ed21cbf00b66c53b65149225374691c78fb277a49086f4a3e74e165.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
83dd87a95ed21cbf00b66c53b65149225374691c78fb277a49086f4a3e74e165.exe
Resource
win10v2004-20221111-en
General
-
Target
83dd87a95ed21cbf00b66c53b65149225374691c78fb277a49086f4a3e74e165
-
Size
1.2MB
-
MD5
5b4161e36f099bab512bb499dd00f4b4
-
SHA1
391914bee26ec0200851a22012da0e72de842dc4
-
SHA256
83dd87a95ed21cbf00b66c53b65149225374691c78fb277a49086f4a3e74e165
-
SHA512
c15b226b03b88d2b739d49c87469adfda62de0fbd4de0276fde5b13fa367015005276ee5fecc5935b65c8ca87f9863f8d15584be43080fe90d23c9f9ab47e359
-
SSDEEP
24576:B4aLKcwKxidvG59hpb6VnD56jCDmukEOf6sDT1fWxRfB+mUQx:FLdwKxMo9Typ6pX14NDUq
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
83dd87a95ed21cbf00b66c53b65149225374691c78fb277a49086f4a3e74e165.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 340KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 175KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 313KB - Virtual size: 312KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ