Behavioral task
behavioral1
Sample
9189f334fbe4e842e693679f66dfcfd1ea47c701fcb42675d151c5dd7ed7810c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9189f334fbe4e842e693679f66dfcfd1ea47c701fcb42675d151c5dd7ed7810c.exe
Resource
win10v2004-20220812-en
General
-
Target
9189f334fbe4e842e693679f66dfcfd1ea47c701fcb42675d151c5dd7ed7810c
-
Size
322KB
-
MD5
2764f491faef18a87c64c7aedcf87360
-
SHA1
9ffaf7660765457e57b8fc0bf615e7298c5617ff
-
SHA256
9189f334fbe4e842e693679f66dfcfd1ea47c701fcb42675d151c5dd7ed7810c
-
SHA512
2c817c44166ec64e83e98a4dba26b63a659f471b102a8f407ef5fb149630ce683e8498be3ea77691a82a47c37ce3a43ec166db3c5d1067dbba2518a8c5c77fa6
-
SSDEEP
6144:ScM8cM8cM8cM8cM8cM8cM8cM8cM8cM8cM8cM8cM8cM:ScM8cM8cM8cM8cM8cM8cM8cM8cM8cM88
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
9189f334fbe4e842e693679f66dfcfd1ea47c701fcb42675d151c5dd7ed7810c.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 60B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 498B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ