Behavioral task
behavioral1
Sample
a798796412e0ea1b1ba6e95b40e6f824e4dc12911f34313aa190e58decd6bc65.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a798796412e0ea1b1ba6e95b40e6f824e4dc12911f34313aa190e58decd6bc65.exe
Resource
win10v2004-20220901-en
General
-
Target
a798796412e0ea1b1ba6e95b40e6f824e4dc12911f34313aa190e58decd6bc65
-
Size
133KB
-
MD5
9554bf61d3869a210a22cd8adbae4d65
-
SHA1
cfd958d825c6eb2520262773a766051cc28338f5
-
SHA256
a798796412e0ea1b1ba6e95b40e6f824e4dc12911f34313aa190e58decd6bc65
-
SHA512
92cd2701cdc09f1521eac29f85a34bf307f0b3f80f692a51372c85ac4ea85a8418145ff804817a946c52b40f4e6ef29689ccc9309e65e281e061a72251ddc0ea
-
SSDEEP
3072:oEpjuktkk1uu4A0QMsZ8QpJH0eiiVWv8NqVFQuIGZ+JHW:D5hB0dc8QPI0Wv8NqV2ulZ+J
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
a798796412e0ea1b1ba6e95b40e6f824e4dc12911f34313aa190e58decd6bc65.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 428KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 130KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 210KB - Virtual size: 209KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 282KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 872B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ