Behavioral task
behavioral1
Sample
ce8fc260638c0f02d0e668f5369395064f2205fd41ed6a4c0ef333dcb7cc5685.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ce8fc260638c0f02d0e668f5369395064f2205fd41ed6a4c0ef333dcb7cc5685.exe
Resource
win10v2004-20221111-en
General
-
Target
ce8fc260638c0f02d0e668f5369395064f2205fd41ed6a4c0ef333dcb7cc5685
-
Size
862KB
-
MD5
004a939fa6d7680d7d4b742b98f607fc
-
SHA1
613b91af43c56c542313ca1ac16a1e525449ca76
-
SHA256
ce8fc260638c0f02d0e668f5369395064f2205fd41ed6a4c0ef333dcb7cc5685
-
SHA512
4a4de93bea6527972a128a94174309195aa1f007afc57a1a2382127889444a2efe6088f6ff5bd372cdb39490624321c6486513331edb32213ccc5ad033aaed88
-
SSDEEP
24576:ioq9g4NtBX1R1Qt6p6+qz0lI1rWTTQIQ:ioqDDR56+q2I11
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ce8fc260638c0f02d0e668f5369395064f2205fd41ed6a4c0ef333dcb7cc5685.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 834KB - Virtual size: 836KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.textbss Size: - Virtual size: 749KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 277KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.didat Size: 1024B - Virtual size: 793B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 948KB - Virtual size: 948KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ