Behavioral task
behavioral1
Sample
83ef79133debddc8754c183407f9f0071f5de2f311e4f110031eea32ad68335e.exe
Resource
win7-20221111-en
General
-
Target
83ef79133debddc8754c183407f9f0071f5de2f311e4f110031eea32ad68335e
-
Size
355KB
-
MD5
b7cc58bbc8fb0d4f9ca2fecf9bdbec29
-
SHA1
5b5d0d421e0f351e93c993b97c23cb5c66647d8a
-
SHA256
83ef79133debddc8754c183407f9f0071f5de2f311e4f110031eea32ad68335e
-
SHA512
08f2f238350b74171d4fd81085b7bf872e67c7c17f2274b732543458fdc30df7c84292e88f2565beb47677f3f778ad9bb8607fed6b45e619a5916ced64b97beb
-
SSDEEP
6144:8TnjnvrM3mjHGh5Doh9Z5cAea4Jv81E6pSdJfLGjIew4P:8Hn438Hwerea2vEEksoZ
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
83ef79133debddc8754c183407f9f0071f5de2f311e4f110031eea32ad68335e.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 372KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 187KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 340KB - Virtual size: 339KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ