Behavioral task
behavioral1
Sample
e98844328195ab71dbb8779eaacdaa08e4aa804b14a3341b0119a9bd3cbb1fbf.exe
Resource
win7-20221111-en
General
-
Target
e98844328195ab71dbb8779eaacdaa08e4aa804b14a3341b0119a9bd3cbb1fbf
-
Size
1.0MB
-
MD5
c9c4eb032dc0161452fc1a43ffb077a1
-
SHA1
931891f8b9bf1f137f61c6fe7047b99f83228d47
-
SHA256
e98844328195ab71dbb8779eaacdaa08e4aa804b14a3341b0119a9bd3cbb1fbf
-
SHA512
1c89589f9888d0fab7b59a3426b85d71270fd67fcd15bdf3851afb6285be04c8bfc5e9bae125bc6f1bba8ab23a52e656297966b6b13608f06fc68b1654dcb52e
-
SSDEEP
24576:HfXsom2zBhpmQguYNZmlJUUjD/vSruddBJauW7RFQVZJ:HPm2z/zguu+JfjDoudROaJ
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
e98844328195ab71dbb8779eaacdaa08e4aa804b14a3341b0119a9bd3cbb1fbf.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 372KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 170KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 78KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 313KB - Virtual size: 312KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 85KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ