Behavioral task
behavioral1
Sample
de539fc81913f9750d51dda3e42b259c7cda480e7721db5d35bdbd362cd3c5ae.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
de539fc81913f9750d51dda3e42b259c7cda480e7721db5d35bdbd362cd3c5ae.exe
Resource
win10v2004-20220812-en
General
-
Target
de539fc81913f9750d51dda3e42b259c7cda480e7721db5d35bdbd362cd3c5ae
-
Size
512KB
-
MD5
09cee5eed29dba3cc79615d37c0cd9f3
-
SHA1
d1e3645e7bdc512ea1caf27d4bf3213f80fc88b6
-
SHA256
de539fc81913f9750d51dda3e42b259c7cda480e7721db5d35bdbd362cd3c5ae
-
SHA512
560fbe98f4f29f74a15f5c1b41d98eeafc7126091699301f0bbbedebcd3f788cef52c5cfd510fc173eb642a2a30407bc17baa4b642275ff066da4b99bf9fabd5
-
SSDEEP
6144:fRe9D9gAkoqIfr5DBOQTGT2Dt6sFOQ9H/NcZhGEuDwNnvl3ts1m8QXLbyOg4HLM/:fRet9RNTy2osFH/U5vR1Mgi
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
de539fc81913f9750d51dda3e42b259c7cda480e7721db5d35bdbd362cd3c5ae.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 156KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ