Behavioral task
behavioral1
Sample
f051ed6408a3299f6448eab8ce3602b7e0315060837cd11f88242e577f83a6e0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f051ed6408a3299f6448eab8ce3602b7e0315060837cd11f88242e577f83a6e0.exe
Resource
win10v2004-20220812-en
General
-
Target
f051ed6408a3299f6448eab8ce3602b7e0315060837cd11f88242e577f83a6e0
-
Size
101KB
-
MD5
178c1c8576edc12fa6c2765a7e0307b8
-
SHA1
29b150fe49030eba5d8be7d7a2007477852dd353
-
SHA256
f051ed6408a3299f6448eab8ce3602b7e0315060837cd11f88242e577f83a6e0
-
SHA512
182f38320bbe642dc0e10c7ff9a711a1961a59b26327d9a92dfe97c1e830cd93b514c03983f606930ad2daf110b0bc817dd139952191355e72f7422edce790df
-
SSDEEP
3072:FRnOIHhZjwUy4+qnK0UJtGxBoc4VkWI03UHRfPkCB9p:F/o4+qnK0xodQ5
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f051ed6408a3299f6448eab8ce3602b7e0315060837cd11f88242e577f83a6e0.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ