Behavioral task
behavioral1
Sample
153f8affd254d7b07cbe3bb5894ad17b681277bfd4642f7c9e55a7b680fb19e1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
153f8affd254d7b07cbe3bb5894ad17b681277bfd4642f7c9e55a7b680fb19e1.exe
Resource
win10v2004-20220812-en
General
-
Target
153f8affd254d7b07cbe3bb5894ad17b681277bfd4642f7c9e55a7b680fb19e1
-
Size
224KB
-
MD5
3c760c125c225f4c36d90bd8de35cd78
-
SHA1
dca39958e81e72f399b82ab087c442d884eecf81
-
SHA256
153f8affd254d7b07cbe3bb5894ad17b681277bfd4642f7c9e55a7b680fb19e1
-
SHA512
b6dbeb145d3f5373fb9c33c1bd9957e96e912d50ba0e22d76e6d98b1569a98df780d1d62e4098f99164ccaedc6baf66e8b3ca7fba538da1be97daf13dbac501b
-
SSDEEP
6144:7aeuu4UtO62O0RsH3rx46VJKGr5YTfcsHvk6bgREPIxf:7b4IL2JRsXypG6BHvk6g/B
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
153f8affd254d7b07cbe3bb5894ad17b681277bfd4642f7c9e55a7b680fb19e1.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 220KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 361KB - Virtual size: 360KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ