Behavioral task
behavioral1
Sample
d1a14ffae7bf3d7af4eed8ea2c1d089f3fe2c53b51a41519df070768f985c950.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d1a14ffae7bf3d7af4eed8ea2c1d089f3fe2c53b51a41519df070768f985c950.exe
Resource
win10v2004-20220901-en
General
-
Target
d1a14ffae7bf3d7af4eed8ea2c1d089f3fe2c53b51a41519df070768f985c950
-
Size
679KB
-
MD5
e4759f7c96db4871a759cdca93a7098e
-
SHA1
43f8d44e8ac96ebfdb2fe1828b1aeb88a3a20f4e
-
SHA256
d1a14ffae7bf3d7af4eed8ea2c1d089f3fe2c53b51a41519df070768f985c950
-
SHA512
20ad90c8ba3a6cde3f258a7f458219d7a247d39b6e6da07b483a97eee77c7c9cec385d1b3b20b5153b8a9d869d52ac9c021a81aea944a1be4358063a75063dae
-
SSDEEP
12288:+9DiyyDmurxHbq/axpQC2cDDhIgE8tXGZSYZKacg7GoXJ2DK4v1hdpGHNu4L6U:IyDm22iTQuhIg7T2YoXSTvaI4x
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
d1a14ffae7bf3d7af4eed8ea2c1d089f3fe2c53b51a41519df070768f985c950.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 606KB - Virtual size: 608KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 275KB - Virtual size: 275KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 139KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ