Behavioral task
behavioral1
Sample
f09d981eeeeeae2b9b55b9ed24f131568bb8b4f09c193f69faeb7d730635503f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f09d981eeeeeae2b9b55b9ed24f131568bb8b4f09c193f69faeb7d730635503f.exe
Resource
win10v2004-20220812-en
General
-
Target
f09d981eeeeeae2b9b55b9ed24f131568bb8b4f09c193f69faeb7d730635503f
-
Size
45KB
-
MD5
2b0e1b7f3b10d8bd5b97cc6daa10ff1e
-
SHA1
905beb09092ecd985e742711465a6f218b4d09bc
-
SHA256
f09d981eeeeeae2b9b55b9ed24f131568bb8b4f09c193f69faeb7d730635503f
-
SHA512
70145e14efb4b0cde0cd1ca5b008d145db04047e592162bb24a530690965987db7722b9ec608f4c84cf2c1ba3ab08587656e6a425a6f5e66188140033e3a7cae
-
SSDEEP
768:jTF1/qfe9aK83V6upfH2xm9uuFAF1PWkwce7NDbfgdfw3WN:fqfIaxUZ1PWLce7BgdxN
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f09d981eeeeeae2b9b55b9ed24f131568bb8b4f09c193f69faeb7d730635503f.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ