Behavioral task
behavioral1
Sample
468fc8cf55e2d2ff14b9e768559de1d2b8adb979ef98c66a16699607c9d93b15.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
468fc8cf55e2d2ff14b9e768559de1d2b8adb979ef98c66a16699607c9d93b15.exe
Resource
win10v2004-20220812-en
General
-
Target
468fc8cf55e2d2ff14b9e768559de1d2b8adb979ef98c66a16699607c9d93b15
-
Size
394KB
-
MD5
daac2b199ec26768f13425ed51cdbc76
-
SHA1
f2d9e3c78904d8565078651f9ee7a61d0a9cb32d
-
SHA256
468fc8cf55e2d2ff14b9e768559de1d2b8adb979ef98c66a16699607c9d93b15
-
SHA512
e214b2fd15450532d55c6d12b003f6efd470c6f3b7f3684a8673a43718cac2f7eb7668e44f02fa32960e896a832e25d0c0b329dfe7a0e3c6edcb73636aea1fbe
-
SSDEEP
12288:FHn3dtYb5O0ci1+kRMb9RF2GGq3//ufOr:FH3jk5O0cigkRo9Rk9fc
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
468fc8cf55e2d2ff14b9e768559de1d2b8adb979ef98c66a16699607c9d93b15.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 488KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 187KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 197KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 340KB - Virtual size: 339KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 203KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ