Behavioral task
behavioral1
Sample
70632d31f31378ffec1dd314fc9ad7c4f9403caf7ef0d6844cda9f874bd614dd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
70632d31f31378ffec1dd314fc9ad7c4f9403caf7ef0d6844cda9f874bd614dd.exe
Resource
win10v2004-20220812-en
General
-
Target
70632d31f31378ffec1dd314fc9ad7c4f9403caf7ef0d6844cda9f874bd614dd
-
Size
406KB
-
MD5
9c2390b34b42ae470db9e955951c2d90
-
SHA1
0bc5b7e5d58e7b8ee9238c98c9c9fbf1346156b0
-
SHA256
70632d31f31378ffec1dd314fc9ad7c4f9403caf7ef0d6844cda9f874bd614dd
-
SHA512
7650340a5bd39deacd96e08cf0a270d1ba15f15b6a1cb0c82c5dd8dad09c5ab347c860c3ba29408b1effd45ac649195880ae0eb6d867ef39bf14defb28b6ff74
-
SSDEEP
6144:9dLCVO8DoBuIZJ5iD0jsY7tBU84rK4QtvmeHKaR8rDPlR8rDPlR8rDPc6be:OM5BuI75iQjswz4r1yqgUDPrUDPrUDP
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
70632d31f31378ffec1dd314fc9ad7c4f9403caf7ef0d6844cda9f874bd614dd.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 348KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 193KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 212KB - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 349KB - Virtual size: 348KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ