Behavioral task
behavioral1
Sample
ae4f34af1cb5d58202e878f5153dbfaf07118dacea5c9d50e10aebc2a365fe47.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ae4f34af1cb5d58202e878f5153dbfaf07118dacea5c9d50e10aebc2a365fe47.exe
Resource
win10v2004-20221111-en
General
-
Target
ae4f34af1cb5d58202e878f5153dbfaf07118dacea5c9d50e10aebc2a365fe47
-
Size
1.2MB
-
MD5
56d6d269dd9fe297a2e2e9fe46e88f97
-
SHA1
326c2ee5e8b02c5d3e83e64a157af369e7e75bb4
-
SHA256
ae4f34af1cb5d58202e878f5153dbfaf07118dacea5c9d50e10aebc2a365fe47
-
SHA512
b9c8a9735f7e51584a0ff59f0d3350eb9be13e2319107650932f4ab0337b6f49692981917e7e743b492b33ac8ab2ff9e1ecb988d9eb74174c75411c446caf157
-
SSDEEP
24576:BslpNbaQi7xtbHVZeswJ1Opt1Wl0WMqLiEmRiObocKAzTjstbSnEKj9vo:2Pi71QiBWF+EmROEzimJo
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ae4f34af1cb5d58202e878f5153dbfaf07118dacea5c9d50e10aebc2a365fe47.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 91KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ