Behavioral task
behavioral1
Sample
34d60cbbad879449bfc5eb4cbf4643435a8ec23f3618f62a0b07524a739590c6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
34d60cbbad879449bfc5eb4cbf4643435a8ec23f3618f62a0b07524a739590c6.exe
Resource
win10v2004-20221111-en
General
-
Target
34d60cbbad879449bfc5eb4cbf4643435a8ec23f3618f62a0b07524a739590c6
-
Size
570KB
-
MD5
6fcd7a4c4bac31ad606c1999e08b21ac
-
SHA1
a0cb9b8c6cd8ff2578c0f99d20f2972cca51db3b
-
SHA256
34d60cbbad879449bfc5eb4cbf4643435a8ec23f3618f62a0b07524a739590c6
-
SHA512
d0490188448c4d6997c38851673b5076373271003eff87e75955528c7f61cfaf00dae90f33b8dc8e4864eb4a10d47ebdad907a21407e415db0bf51f1c80d007f
-
SSDEEP
12288:P53fg4N6GPBE5O9KOPcgyKzRIe8z33TAAiricOetAEkLDZcvIwzy95:P5PjN6Gx9TPcgyCF8zMAcztLkHOvVE5
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
34d60cbbad879449bfc5eb4cbf4643435a8ec23f3618f62a0b07524a739590c6.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 568KB - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 483KB - Virtual size: 482KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ