Behavioral task
behavioral1
Sample
edfb7e0dab18ddac19157f52bbdc9b7cb62df1b3dfd736d063230087ff92e66e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
edfb7e0dab18ddac19157f52bbdc9b7cb62df1b3dfd736d063230087ff92e66e.exe
Resource
win10v2004-20220812-en
General
-
Target
edfb7e0dab18ddac19157f52bbdc9b7cb62df1b3dfd736d063230087ff92e66e
-
Size
705KB
-
MD5
8c63d1abfd0aedc80747f65fd77b0966
-
SHA1
c8399e74834d2ce901bf3fa494b0746a90383f46
-
SHA256
edfb7e0dab18ddac19157f52bbdc9b7cb62df1b3dfd736d063230087ff92e66e
-
SHA512
5eae5b8436814e06c6d8a7b9d8b21fddc4b277067fd4f940c1f4a37bf983d6c33e285aba618fa0d9498976cd9c46a151585a8250cb2bdf3c20d78aadf13ae6f6
-
SSDEEP
12288:HLtgnIj3wZn5qWXiN080h0j8WWSsCeI+UgnXnjXyVb5ba3+jetKEjCuzPs/5W9:HLtgEgeWXiN08YIHWSOnbyS378EjBPqw
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
edfb7e0dab18ddac19157f52bbdc9b7cb62df1b3dfd736d063230087ff92e66e.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 788KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 703KB - Virtual size: 704KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 656KB - Virtual size: 655KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 222KB - Virtual size: 222KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 162KB - Virtual size: 580KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 440B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ