Behavioral task
behavioral1
Sample
98cc3915186c8b1be03c023683b298bdbc217e12479c7543fd32ba5b91a325e0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
98cc3915186c8b1be03c023683b298bdbc217e12479c7543fd32ba5b91a325e0.exe
Resource
win10v2004-20220812-en
General
-
Target
98cc3915186c8b1be03c023683b298bdbc217e12479c7543fd32ba5b91a325e0
-
Size
127KB
-
MD5
42d9dfb393c1659189c13df4fa4fd714
-
SHA1
d0dccfee0f25a27c91f00c81c202940c95455347
-
SHA256
98cc3915186c8b1be03c023683b298bdbc217e12479c7543fd32ba5b91a325e0
-
SHA512
41ab0701bee6e6b18d6a1e9bfe787844ca69cbcda2caddaf9ab6e0c19688f2d2c7e256fb706aa2bb92d0336f1f3e37cd184d52be122927995061e0551d54a3a5
-
SSDEEP
3072:84vsKS2UboUL9ZPglIKzlbiClDkd2D1N6Tlx:84UK3UbNMflWa
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
98cc3915186c8b1be03c023683b298bdbc217e12479c7543fd32ba5b91a325e0.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ